General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241225-s5cb8sxlgn

  • MD5

    91b4f4aaf653cddafe31106cbb074015

  • SHA1

    604075eb4954944bf4f06e0ffa4e53269c6f2ffd

  • SHA256

    a4b7d44f099ed2f795d2531feefa6cbaf7abdeccae410b885bb2af105365bdb6

  • SHA512

    52c2a6b4a7019e6af97203214fddff6ecec0572c8684b5d8ea1ec09b9afa8f4f3b47eb8b8f0524d412a43cfc076519602ccde72fb3587511ac33bde27ec9f735

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui57kmdzJgGlzDpH7uNj1J+:neD8ZSWvZHZbs1row697qohQvg95QizJ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      91b4f4aaf653cddafe31106cbb074015

    • SHA1

      604075eb4954944bf4f06e0ffa4e53269c6f2ffd

    • SHA256

      a4b7d44f099ed2f795d2531feefa6cbaf7abdeccae410b885bb2af105365bdb6

    • SHA512

      52c2a6b4a7019e6af97203214fddff6ecec0572c8684b5d8ea1ec09b9afa8f4f3b47eb8b8f0524d412a43cfc076519602ccde72fb3587511ac33bde27ec9f735

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui57kmdzJgGlzDpH7uNj1J+:neD8ZSWvZHZbs1row697qohQvg95QizJ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks