General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241205-elr2paxqev

  • MD5

    14e54f6825fc69413bd8e524cdf0b76d

  • SHA1

    9750cc4e5af8d0b93250780bc5c3742ab1d99490

  • SHA256

    388e06f604215f77ec13a1a3bb64c2c309cae92edae368793d57f7958d3f9ed6

  • SHA512

    93ed9a0c5d0d89885173a93f717c14c7895c0ee34398304b01583d70c4e5ba0d592dd55ccd06b52fd0c205182c8a33669a21f2ce4c3d171cdf2e449b06f1172f

  • SSDEEP

    384:ZQPKQulWL6L+eVcdRa9Iy0wQA8HlfYcGZwyq4K1jpfvN+mwhOJgGlzDpH7uNj1J9:ZQyVsI+I6REIyUmq4K1jpHYVOJgGlzDm

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      14e54f6825fc69413bd8e524cdf0b76d

    • SHA1

      9750cc4e5af8d0b93250780bc5c3742ab1d99490

    • SHA256

      388e06f604215f77ec13a1a3bb64c2c309cae92edae368793d57f7958d3f9ed6

    • SHA512

      93ed9a0c5d0d89885173a93f717c14c7895c0ee34398304b01583d70c4e5ba0d592dd55ccd06b52fd0c205182c8a33669a21f2ce4c3d171cdf2e449b06f1172f

    • SSDEEP

      384:ZQPKQulWL6L+eVcdRa9Iy0wQA8HlfYcGZwyq4K1jpfvN+mwhOJgGlzDpH7uNj1J9:ZQyVsI+I6REIyUmq4K1jpHYVOJgGlzDm

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks