General

  • Target

    boatnet.mips.elf

  • Size

    30KB

  • Sample

    241226-rhtsbsxldw

  • MD5

    3fc83db824f3e00ccff84838f04eecd6

  • SHA1

    cd9d0cdcc3a514d5df8a92f8fc2e9818bf623a3d

  • SHA256

    4c1d19dcfc2efefbf0be3e0a0464a3bff1b706449afa257ba0671972474430c8

  • SHA512

    7e5d13746002ee7e27b5206d3522dd93f904d46fe784280ed3f0291fc613445c29900a0f5730078abee7718838557a2c2efeac8dba452ce064d2b74eed19e4b9

  • SSDEEP

    768:g/qvfZk5zP1HDd+OMKCqCSehAXlJgGlzDpbuR1Ja:tvgzPdMOMKCtZAPVJuM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      30KB

    • MD5

      3fc83db824f3e00ccff84838f04eecd6

    • SHA1

      cd9d0cdcc3a514d5df8a92f8fc2e9818bf623a3d

    • SHA256

      4c1d19dcfc2efefbf0be3e0a0464a3bff1b706449afa257ba0671972474430c8

    • SHA512

      7e5d13746002ee7e27b5206d3522dd93f904d46fe784280ed3f0291fc613445c29900a0f5730078abee7718838557a2c2efeac8dba452ce064d2b74eed19e4b9

    • SSDEEP

      768:g/qvfZk5zP1HDd+OMKCqCSehAXlJgGlzDpbuR1Ja:tvgzPdMOMKCtZAPVJuM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks