General

  • Target

    boatnet.arm7.elf

  • Size

    54KB

  • Sample

    241226-rey8msxkfx

  • MD5

    981c4b70b3a2998ef70f31f3336f584b

  • SHA1

    c9a8fd187bef4247d5f80872a3dc4713f31af321

  • SHA256

    fcf97f7fd85a631801ce75f88348fb65665dc7979735a0343f918d96ba9b5ab6

  • SHA512

    918b77bed37cfa21a494f1804ed904480906e6492d9aedb0fa1a9f496fa338ecff316d674f207063a45010218ef50f4d13c613aef90f932baeff67eae1267d7a

  • SSDEEP

    1536:4IHiFvo89yZXGH3+0BuSM9LwFFOzML6tBiMvcI:4Xvo89y9QAt9LwJL23v/

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      54KB

    • MD5

      981c4b70b3a2998ef70f31f3336f584b

    • SHA1

      c9a8fd187bef4247d5f80872a3dc4713f31af321

    • SHA256

      fcf97f7fd85a631801ce75f88348fb65665dc7979735a0343f918d96ba9b5ab6

    • SHA512

      918b77bed37cfa21a494f1804ed904480906e6492d9aedb0fa1a9f496fa338ecff316d674f207063a45010218ef50f4d13c613aef90f932baeff67eae1267d7a

    • SSDEEP

      1536:4IHiFvo89yZXGH3+0BuSM9LwFFOzML6tBiMvcI:4Xvo89y9QAt9LwJL23v/

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks