General

  • Target

    boatnet.x86_64.elf

  • Size

    22KB

  • Sample

    241220-13xt6avnfx

  • MD5

    957ea75ddf1944fd680e923628a7a5d3

  • SHA1

    4852bf8573d343edbcaabdd7a62b1768e8cea4cb

  • SHA256

    b699d1673c8dc2346ef917bce6367081777700322c740c736cc10b3c8a28cdba

  • SHA512

    de98e358bc5cce88425078f57564e9d1db26916c3ef4b35cdb1f3fc1e0340d689ebc2cc0797cf20c4d7cbb86d99afba5d2f6599c7143423190e322b408b43e25

  • SSDEEP

    384:pFYfwf/izXcR3fivuQUhJX9tDttg9D4cbJYjg5zl35j3kpt1hTzKk+xzN2lM5B7C:HikKzXctauJX9tyBmCR3V3kL+ZxzNSM2

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86_64.elf

    • Size

      22KB

    • MD5

      957ea75ddf1944fd680e923628a7a5d3

    • SHA1

      4852bf8573d343edbcaabdd7a62b1768e8cea4cb

    • SHA256

      b699d1673c8dc2346ef917bce6367081777700322c740c736cc10b3c8a28cdba

    • SHA512

      de98e358bc5cce88425078f57564e9d1db26916c3ef4b35cdb1f3fc1e0340d689ebc2cc0797cf20c4d7cbb86d99afba5d2f6599c7143423190e322b408b43e25

    • SSDEEP

      384:pFYfwf/izXcR3fivuQUhJX9tDttg9D4cbJYjg5zl35j3kpt1hTzKk+xzN2lM5B7C:HikKzXctauJX9tyBmCR3V3kL+ZxzNSM2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks