General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    241225-s5b2gaxjdw

  • MD5

    5da6cd32bd2abbf9908323f804a84048

  • SHA1

    b3cf93bf8e6dfe600c1e00e22646a8523b60e328

  • SHA256

    c77a735aabf6e30a8ef722fda598b5cb4f278dca2bba4487c22d75f51c3db260

  • SHA512

    f24c7789420b8bfd1991d7b9d0594d0b538f289b7d7fabf39e361628259047b797fdffd9af1e4f15b2ce27d707b3fc3788735760c7fae24d9ea77b851436fdae

  • SSDEEP

    768:S/TYCoIxdEk+AxoTZAZHFeq8b3A9q3UELbUXfi6nVMQHI4vcGpva:SECFd+A6YHAxJLRQZa

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      5da6cd32bd2abbf9908323f804a84048

    • SHA1

      b3cf93bf8e6dfe600c1e00e22646a8523b60e328

    • SHA256

      c77a735aabf6e30a8ef722fda598b5cb4f278dca2bba4487c22d75f51c3db260

    • SHA512

      f24c7789420b8bfd1991d7b9d0594d0b538f289b7d7fabf39e361628259047b797fdffd9af1e4f15b2ce27d707b3fc3788735760c7fae24d9ea77b851436fdae

    • SSDEEP

      768:S/TYCoIxdEk+AxoTZAZHFeq8b3A9q3UELbUXfi6nVMQHI4vcGpva:SECFd+A6YHAxJLRQZa

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks