General

  • Target

    109.176.30.237-boatnet.mpsl-2024-12-27T202043.elf

  • Size

    24KB

  • Sample

    241227-1pbprs1jhn

  • MD5

    6327d00e2d96c99ac15af1b6b00d2818

  • SHA1

    74fd562439ee1f65eb93fbc9dc5230a3e35262ee

  • SHA256

    22d5ae9cbdac21c8e07fa65c31949b215d7d459e6b74ef0f62024ad06754d4a8

  • SHA512

    2d060705b86834a96dd7de3bed8c273df338714acb9d87909bae1345d1f790c154a0bac09396eb7430df435849f532636c8aabe93cdcb0c00fdd4a14e4e0ef57

  • SSDEEP

    768:c4rQlS07dEv0UXqUhvQE+CXmwsJ6MywZByOMcZq8Wvw:BQlS07FUXqIYSXmwsAJOHq6

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      109.176.30.237-boatnet.mpsl-2024-12-27T202043.elf

    • Size

      24KB

    • MD5

      6327d00e2d96c99ac15af1b6b00d2818

    • SHA1

      74fd562439ee1f65eb93fbc9dc5230a3e35262ee

    • SHA256

      22d5ae9cbdac21c8e07fa65c31949b215d7d459e6b74ef0f62024ad06754d4a8

    • SHA512

      2d060705b86834a96dd7de3bed8c273df338714acb9d87909bae1345d1f790c154a0bac09396eb7430df435849f532636c8aabe93cdcb0c00fdd4a14e4e0ef57

    • SSDEEP

      768:c4rQlS07dEv0UXqUhvQE+CXmwsJ6MywZByOMcZq8Wvw:BQlS07FUXqIYSXmwsAJOHq6

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks