General

  • Target

    boatnet.arm.elf

  • Size

    21KB

  • Sample

    241207-jps6dasrfw

  • MD5

    32b471b74223482a851f57b827da52bc

  • SHA1

    332c14ed0e98ba818f1cb804ea8cc2f44dac18ce

  • SHA256

    bc7b677dc93628951edb4ac0d671d7751dee24ee81b3d632dce8b6e8f65ddc80

  • SHA512

    a8bc91f7286de3ca019ed11d8489e9e126c140805ff433ac8186d21a5524685dc1c3126caa986962487a950a92ded2b790d61b025155881f501d20bd4b6f7620

  • SSDEEP

    384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjZwhymdGUop5h/:TvQn4j+ZO5fKAlxdws3UozJ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm.elf

    • Size

      21KB

    • MD5

      32b471b74223482a851f57b827da52bc

    • SHA1

      332c14ed0e98ba818f1cb804ea8cc2f44dac18ce

    • SHA256

      bc7b677dc93628951edb4ac0d671d7751dee24ee81b3d632dce8b6e8f65ddc80

    • SHA512

      a8bc91f7286de3ca019ed11d8489e9e126c140805ff433ac8186d21a5524685dc1c3126caa986962487a950a92ded2b790d61b025155881f501d20bd4b6f7620

    • SSDEEP

      384:TvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjZwhymdGUop5h/:TvQn4j+ZO5fKAlxdws3UozJ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks