General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241207-jqd3vayner

  • MD5

    c028ec5c5eca9adb4fbaa0e16bccf909

  • SHA1

    7461ecfe4a3df554c9475725eaadf9a43e8f414b

  • SHA256

    bb7be69a43bccdc260970dbdecd4d541d02ea0dd2f28d7dbc8ab317dbf4c92e9

  • SHA512

    8d9295317b9b000cb996ec6fbeb46f4103b9d966bd851549339f63ed524dad12039ae74b6214b3e6c0f117c9c2ad79bfe161c46884f8baf75f5f5f15d079a5b0

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuih0jmdtJgGlzDpH7uNj1J1:YeD8ZSWvZHZbs1row697qohQvg9GjitW

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      c028ec5c5eca9adb4fbaa0e16bccf909

    • SHA1

      7461ecfe4a3df554c9475725eaadf9a43e8f414b

    • SHA256

      bb7be69a43bccdc260970dbdecd4d541d02ea0dd2f28d7dbc8ab317dbf4c92e9

    • SHA512

      8d9295317b9b000cb996ec6fbeb46f4103b9d966bd851549339f63ed524dad12039ae74b6214b3e6c0f117c9c2ad79bfe161c46884f8baf75f5f5f15d079a5b0

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuih0jmdtJgGlzDpH7uNj1J1:YeD8ZSWvZHZbs1row697qohQvg9GjitW

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks