General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    241201-lvgqmstndr

  • MD5

    81957eaea2be9a29f5ed8d95e17bc7c9

  • SHA1

    57f102c4412c7b18c5350bdc0e432b63ec9db0db

  • SHA256

    0c37cfbe0b95bc0a4dbb2ba01a377e2a3a34182300d43b1af583790b944a4566

  • SHA512

    3a07c650ceabd7654e3895ef04ea3c1e784d91cd4bd4f98558ecb5f5f0f0767ee70544fde93490896d8c27ed9f7e8b62fc3ae0e06a7194aa7d5b4d5b2df1bb98

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b31W9q3UELbUXfi6nVMQHI4vcGpvd:gECFd+A6YHAxZLRQZd

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      81957eaea2be9a29f5ed8d95e17bc7c9

    • SHA1

      57f102c4412c7b18c5350bdc0e432b63ec9db0db

    • SHA256

      0c37cfbe0b95bc0a4dbb2ba01a377e2a3a34182300d43b1af583790b944a4566

    • SHA512

      3a07c650ceabd7654e3895ef04ea3c1e784d91cd4bd4f98558ecb5f5f0f0767ee70544fde93490896d8c27ed9f7e8b62fc3ae0e06a7194aa7d5b4d5b2df1bb98

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b31W9q3UELbUXfi6nVMQHI4vcGpvd:gECFd+A6YHAxZLRQZd

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks