General

  • Target

    boatnet.arm.elf

  • Size

    21KB

  • Sample

    241201-kze7yaypgt

  • MD5

    88e8850169a42720de0ee619575e43ec

  • SHA1

    82cea4b59e1fb1ea8b4090113a16dbdc7b0e70f3

  • SHA256

    848893915d88849196906abfb8fa7a8fa9fc561c8d7f6800344dc722cf057036

  • SHA512

    762eb669265a51c92dc3f10e9739faedd4d034011269b9ac5ae9c5411f2d4321f558805fa1954308eef873bb8fa6385fd5fcd11043f38ae59cace43c292adbcb

  • SSDEEP

    384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjnTG3gMhymdGUop5h+:UvQn4j+ZO5fKAlxXAgMs3UozM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm.elf

    • Size

      21KB

    • MD5

      88e8850169a42720de0ee619575e43ec

    • SHA1

      82cea4b59e1fb1ea8b4090113a16dbdc7b0e70f3

    • SHA256

      848893915d88849196906abfb8fa7a8fa9fc561c8d7f6800344dc722cf057036

    • SHA512

      762eb669265a51c92dc3f10e9739faedd4d034011269b9ac5ae9c5411f2d4321f558805fa1954308eef873bb8fa6385fd5fcd11043f38ae59cace43c292adbcb

    • SSDEEP

      384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjnTG3gMhymdGUop5h+:UvQn4j+ZO5fKAlxXAgMs3UozM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks