General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241209-2ygg2szjfq

  • MD5

    229ff875c9a1b28df9a54a7304a7dd41

  • SHA1

    589fd49e0e4cdb9d47033fdffb69d2606ef832a4

  • SHA256

    34fc6a1feadca879509e573d6f27c7d916f13c553f1e6672ea997f09d3a6ebed

  • SHA512

    1b89422e5db802c8b207825db282a653a03e28d03a85235693f044cf8cdb0dc4bebaf24df75ba70d38c3ac32103bbef758ef04344599ebaaf4caf203ba9e19b3

  • SSDEEP

    384:deD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiAmd7JgGlzDpH7uNj1JA4G:deD8ZSWvZHZbs1row697qohQvg9Ai7JF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      229ff875c9a1b28df9a54a7304a7dd41

    • SHA1

      589fd49e0e4cdb9d47033fdffb69d2606ef832a4

    • SHA256

      34fc6a1feadca879509e573d6f27c7d916f13c553f1e6672ea997f09d3a6ebed

    • SHA512

      1b89422e5db802c8b207825db282a653a03e28d03a85235693f044cf8cdb0dc4bebaf24df75ba70d38c3ac32103bbef758ef04344599ebaaf4caf203ba9e19b3

    • SSDEEP

      384:deD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiAmd7JgGlzDpH7uNj1JA4G:deD8ZSWvZHZbs1row697qohQvg9Ai7JF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks