General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241208-e795dssrdy

  • MD5

    dcffe9c1b5b68d5fadf5b615485cc7ee

  • SHA1

    afefa6ccd3e3eaf74404d9bdc1fce683ab9765a1

  • SHA256

    13c0e5fe15717adbae7e1be88370cef7f8bbb14f677f217ea8dce40438665af3

  • SHA512

    a7a8847b26fb100987a70c91892c6e3675803fe181ed0e13aa352801d1ebdc3d56cd9f8896eae0168910bed23d1cb0357a7d055c21aa9fd0b35be1f160902771

  • SSDEEP

    384:SQPKQulWL6L+eVcdRa9Iy0wQA8HlfYcGZwyq4K1jpfv8Y5mwhGJgGlzDpH7uNj1Y:SQyVsI+I6REIyUmq4K1jpHN5VGJgGlzF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      dcffe9c1b5b68d5fadf5b615485cc7ee

    • SHA1

      afefa6ccd3e3eaf74404d9bdc1fce683ab9765a1

    • SHA256

      13c0e5fe15717adbae7e1be88370cef7f8bbb14f677f217ea8dce40438665af3

    • SHA512

      a7a8847b26fb100987a70c91892c6e3675803fe181ed0e13aa352801d1ebdc3d56cd9f8896eae0168910bed23d1cb0357a7d055c21aa9fd0b35be1f160902771

    • SSDEEP

      384:SQPKQulWL6L+eVcdRa9Iy0wQA8HlfYcGZwyq4K1jpfv8Y5mwhGJgGlzDpH7uNj1Y:SQyVsI+I6REIyUmq4K1jpHN5VGJgGlzF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks