General

  • Target

    boatnet.mips.elf

  • Size

    30KB

  • Sample

    241226-3l481svpaq

  • MD5

    195d25d44db96589dd2e2bbd3f8bb695

  • SHA1

    28ca81527dc09e71eaf094f52318398cf82d975a

  • SHA256

    af80c381119e8803aea03b1b8151d1697391f482f684695307c820f1bd6201c2

  • SHA512

    4498318acaaa750bcc2b313baf59aa4e3da7bc6badd9bfc18e0298c7058a4cac9d6d9541dfe22bb58c91b4e11eb48f1d2f943b68f4ed707c11a14294bd4c8934

  • SSDEEP

    768:JOF8y6PE8V5f3vMmnF2xMfC/XmbTXk6kbUG8JgGlzDpbuR1J2:kFZ6PEWsmFg/2bT0p0VJuU

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      30KB

    • MD5

      195d25d44db96589dd2e2bbd3f8bb695

    • SHA1

      28ca81527dc09e71eaf094f52318398cf82d975a

    • SHA256

      af80c381119e8803aea03b1b8151d1697391f482f684695307c820f1bd6201c2

    • SHA512

      4498318acaaa750bcc2b313baf59aa4e3da7bc6badd9bfc18e0298c7058a4cac9d6d9541dfe22bb58c91b4e11eb48f1d2f943b68f4ed707c11a14294bd4c8934

    • SSDEEP

      768:JOF8y6PE8V5f3vMmnF2xMfC/XmbTXk6kbUG8JgGlzDpbuR1J2:kFZ6PEWsmFg/2bT0p0VJuU

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks