General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    241205-jx94vswja1

  • MD5

    dc0c8ab7ecee46c7e2af6f16b9749ee4

  • SHA1

    f4594c4ca15f963408692342306e13f247a4661a

  • SHA256

    b78c79711c137a2eccced117b9ab3af1830e317f475a0ecaa1575e3f3833d13f

  • SHA512

    aa9c33813661b3fa917a577bd6d79f0ef1ed143816f117dc20963c61e9e78613154d0042c8616db3b2bd7949e61de6b657a70aa552c3f139445b8bc61cab0165

  • SSDEEP

    384:Mg9Lpj8srqPui8uZxoIA57RWQjJiEZimZkraxmTb+502F2vwA9dWuMW21bAK1oTz:798008kxofB4mZkracTbp2F2TWul0c5X

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      dc0c8ab7ecee46c7e2af6f16b9749ee4

    • SHA1

      f4594c4ca15f963408692342306e13f247a4661a

    • SHA256

      b78c79711c137a2eccced117b9ab3af1830e317f475a0ecaa1575e3f3833d13f

    • SHA512

      aa9c33813661b3fa917a577bd6d79f0ef1ed143816f117dc20963c61e9e78613154d0042c8616db3b2bd7949e61de6b657a70aa552c3f139445b8bc61cab0165

    • SSDEEP

      384:Mg9Lpj8srqPui8uZxoIA57RWQjJiEZimZkraxmTb+502F2vwA9dWuMW21bAK1oTz:798008kxofB4mZkracTbp2F2TWul0c5X

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks