General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    241209-2ssywsyrck

  • MD5

    e91b79fc001e5951317f7529cc58e419

  • SHA1

    e23a898b6afd1742926b20d318457a57cd84da7a

  • SHA256

    b1469dcee97e3edfdeceba8d27ea6d71c486ba59e5e36039690fd34d882cbf4c

  • SHA512

    c32dc4aa9719ebe8011ad6d3068386c52ef7a7de0e959b425c35fa3cd1e7559c8c9cf25277a0656e381499cf6639f975abc68b130ff5422622fe01b47c83e1ec

  • SSDEEP

    384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTc:x98o08kxofBE+ZkXaITbp2F2TWul0c5g

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      e91b79fc001e5951317f7529cc58e419

    • SHA1

      e23a898b6afd1742926b20d318457a57cd84da7a

    • SHA256

      b1469dcee97e3edfdeceba8d27ea6d71c486ba59e5e36039690fd34d882cbf4c

    • SHA512

      c32dc4aa9719ebe8011ad6d3068386c52ef7a7de0e959b425c35fa3cd1e7559c8c9cf25277a0656e381499cf6639f975abc68b130ff5422622fe01b47c83e1ec

    • SSDEEP

      384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTc:x98o08kxofBE+ZkXaITbp2F2TWul0c5g

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks