General

  • Target

    boatnet.arm7.elf

  • Size

    54KB

  • Sample

    241226-22r3ystqh1

  • MD5

    a7fe2851a53aa31aa123604b227101ad

  • SHA1

    6c230b2274beb744012ec78fc40a120fa8256af8

  • SHA256

    c2f30dcb2a9b7c2bc104b7ab2959f0160e6b5bec634ec58e59f301bcc639f150

  • SHA512

    b39f15929c3240a7053f28b2f6e310c9bd280773bd2c52a4dcaf7c19b8e745a851f739ba6e5489bb89db1757171ae7db195c9025ee7b7ad5104edad76b54ab57

  • SSDEEP

    1536:9QTWJhjHEL+39bNOGGB3fUtoLJjmeK3vOPeLRP:9cMgL+3LSB3fUmLJsVFP

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      54KB

    • MD5

      a7fe2851a53aa31aa123604b227101ad

    • SHA1

      6c230b2274beb744012ec78fc40a120fa8256af8

    • SHA256

      c2f30dcb2a9b7c2bc104b7ab2959f0160e6b5bec634ec58e59f301bcc639f150

    • SHA512

      b39f15929c3240a7053f28b2f6e310c9bd280773bd2c52a4dcaf7c19b8e745a851f739ba6e5489bb89db1757171ae7db195c9025ee7b7ad5104edad76b54ab57

    • SSDEEP

      1536:9QTWJhjHEL+39bNOGGB3fUtoLJjmeK3vOPeLRP:9cMgL+3LSB3fUmLJsVFP

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks