General

  • Target

    boatnet.x86.elf

  • Size

    27KB

  • Sample

    241226-rey8msxndr

  • MD5

    9217ca9c82f75257a8261d3e0506b220

  • SHA1

    2af156314ebbb200e6d33697939048ca3c5c6e49

  • SHA256

    b75b3830c0cee439af1713a03a96b1bba0b1969597d185dc0904e77b7ec484b2

  • SHA512

    80cb57e6865ccb1833e67b4b66e345f20075c1e8eb5890e7065432463bffbce58aaa87dfd759d7980caeae1c569f9f3e69a8d3d0a059f3cda566e91f9cacb366

  • SSDEEP

    768:5ac0rOyubkgG13Sh7dOAELtLy43zxZY3AMDKLM8FSS:Uc0KFq3wkHLrbY3DDUMe

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      27KB

    • MD5

      9217ca9c82f75257a8261d3e0506b220

    • SHA1

      2af156314ebbb200e6d33697939048ca3c5c6e49

    • SHA256

      b75b3830c0cee439af1713a03a96b1bba0b1969597d185dc0904e77b7ec484b2

    • SHA512

      80cb57e6865ccb1833e67b4b66e345f20075c1e8eb5890e7065432463bffbce58aaa87dfd759d7980caeae1c569f9f3e69a8d3d0a059f3cda566e91f9cacb366

    • SSDEEP

      768:5ac0rOyubkgG13Sh7dOAELtLy43zxZY3AMDKLM8FSS:Uc0KFq3wkHLrbY3DDUMe

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks