General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    241207-jrq4sstjdv

  • MD5

    55799be49ed0a02a21ba91f37a9b64d0

  • SHA1

    1a389f1957576defda9a325c6a64fb099179d166

  • SHA256

    ca502b385c4038b59af1a1833ab3367c3ec9f2a8cb58ea2c7956196653ca1246

  • SHA512

    ce4c48e4ea009dd8315e989e73e1c4fcf01d810a780c5a7f1a871281af6a50d5cf19d3b7f9fd396965f4eb9e724f4e6a0c8aa63a700089e6ad334c35ea6b0f38

  • SSDEEP

    768:S/TYCoIxdEk+AxoTZAZHFeq8b3V9q3UELbUXfi6nVMQHI4vcGpvi:SECFd+A6YHAxoLRQZi

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      55799be49ed0a02a21ba91f37a9b64d0

    • SHA1

      1a389f1957576defda9a325c6a64fb099179d166

    • SHA256

      ca502b385c4038b59af1a1833ab3367c3ec9f2a8cb58ea2c7956196653ca1246

    • SHA512

      ce4c48e4ea009dd8315e989e73e1c4fcf01d810a780c5a7f1a871281af6a50d5cf19d3b7f9fd396965f4eb9e724f4e6a0c8aa63a700089e6ad334c35ea6b0f38

    • SSDEEP

      768:S/TYCoIxdEk+AxoTZAZHFeq8b3V9q3UELbUXfi6nVMQHI4vcGpvi:SECFd+A6YHAxoLRQZi

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks