General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241201-k17ctatlhr

  • MD5

    76b4e7e2da67632ce2e85252ae540f8b

  • SHA1

    6126293333b050bc3b9411772e4394e96a3984e5

  • SHA256

    e1b87e9a3d0291fa743fb8d7ea082ac57027583915dd3544bbc6d7863102c447

  • SHA512

    96b0cc0297879c70f22fb7d56c1b197d4941d7cdc9f8c5c695bd4b2ae13c08c536e700ed8024377c7be219db71f356f6e532bd62a1718d9a122d13a376733281

  • SSDEEP

    384:6eD8ZSH2LLZUYyGZbsOiTTn7d0Tfv8ls9dNldM+iChOEzmd1JgGlzDpH7uNj1JAN:6eD8ZSWvZHZbs1T7rls9d1EChOki1JgG

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      76b4e7e2da67632ce2e85252ae540f8b

    • SHA1

      6126293333b050bc3b9411772e4394e96a3984e5

    • SHA256

      e1b87e9a3d0291fa743fb8d7ea082ac57027583915dd3544bbc6d7863102c447

    • SHA512

      96b0cc0297879c70f22fb7d56c1b197d4941d7cdc9f8c5c695bd4b2ae13c08c536e700ed8024377c7be219db71f356f6e532bd62a1718d9a122d13a376733281

    • SSDEEP

      384:6eD8ZSH2LLZUYyGZbsOiTTn7d0Tfv8ls9dNldM+iChOEzmd1JgGlzDpH7uNj1JAN:6eD8ZSWvZHZbs1T7rls9d1EChOki1JgG

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks