General

  • Target

    45.200.149.186-boatnet.arm7-2024-12-28T012301.elf

  • Size

    45KB

  • Sample

    241228-22txjsvjdz

  • MD5

    f9e40e3fc58794c2167780a2d8bae995

  • SHA1

    76dfcbeea6121ad1b3f91477233336da2dd781f7

  • SHA256

    d80d66d9ff72fc5d9271aca343d1256cb517a8bee7d69c0469c577658de7ac33

  • SHA512

    75375ec4be71cc2eba7d5ff5628b5277466af7f9e490a6cbfaefa468b237897ea044904f097f66178aeaf742345c1cec3a53d4bd1ee5501919b9b4b875e19981

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3+TB9q3UELbUXfi6nVMQHI4vcGpvN:DECFd+A6YHAx+T0LRQZN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.200.149.186-boatnet.arm7-2024-12-28T012301.elf

    • Size

      45KB

    • MD5

      f9e40e3fc58794c2167780a2d8bae995

    • SHA1

      76dfcbeea6121ad1b3f91477233336da2dd781f7

    • SHA256

      d80d66d9ff72fc5d9271aca343d1256cb517a8bee7d69c0469c577658de7ac33

    • SHA512

      75375ec4be71cc2eba7d5ff5628b5277466af7f9e490a6cbfaefa468b237897ea044904f097f66178aeaf742345c1cec3a53d4bd1ee5501919b9b4b875e19981

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3+TB9q3UELbUXfi6nVMQHI4vcGpvN:DECFd+A6YHAx+T0LRQZN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks