General

  • Target

    I0R6F_boatnet.arm.elf

  • Size

    21KB

  • Sample

    241201-k33gmsyqas

  • MD5

    c3501c8a0d89d19b5f0ba9068c356b7c

  • SHA1

    23cb0231e8677e80ef86ac37cc75970376c85ecb

  • SHA256

    b601935c3f979fe35f4020286e7a007913b8bdd977e454661ff461a7657c27d6

  • SHA512

    397fb639e520d18230e381a3c8db2b8b0e9c2d86421f7c0a20de12e7e4971bcc580184eb3b043a3bf917cc7440df37f92b53640ce30d9aa461cd3dc77a42cf1c

  • SSDEEP

    384:b/I5hpgy5Kbyq1kkIYWSsXznTzoNsRmtjURCpTLDkRhymdGUop5hg:jEhpgy+zQZ5iURds3Uoze

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      I0R6F_boatnet.arm.elf

    • Size

      21KB

    • MD5

      c3501c8a0d89d19b5f0ba9068c356b7c

    • SHA1

      23cb0231e8677e80ef86ac37cc75970376c85ecb

    • SHA256

      b601935c3f979fe35f4020286e7a007913b8bdd977e454661ff461a7657c27d6

    • SHA512

      397fb639e520d18230e381a3c8db2b8b0e9c2d86421f7c0a20de12e7e4971bcc580184eb3b043a3bf917cc7440df37f92b53640ce30d9aa461cd3dc77a42cf1c

    • SSDEEP

      384:b/I5hpgy5Kbyq1kkIYWSsXznTzoNsRmtjURCpTLDkRhymdGUop5hg:jEhpgy+zQZ5iURds3Uoze

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks