General

  • Target

    45.200.149.186-boatnet.x86-2024-12-28T012259.elf

  • Size

    20KB

  • Sample

    241228-22txjsvlgl

  • MD5

    1d73ea8ec346ca1c4cdb974c5b9a022a

  • SHA1

    1267a2106c89a13708007a259543a4bf02d74bcc

  • SHA256

    5d3f294ee37e51a1b7a21bc5cf0a51a75e1b7fc10cb74fb9fb150c4ad5280644

  • SHA512

    2f04efb69f4fd965373732bcb741fb4d6f359959ce22299b46c5bca0c6369628d103e51998f7bd19a0fe7f332e1ea984a36152f0919532cf5f12a667601207b3

  • SSDEEP

    384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK4:k98o08kxofBE+ZkXaqGbp2F2TWul0c59

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.200.149.186-boatnet.x86-2024-12-28T012259.elf

    • Size

      20KB

    • MD5

      1d73ea8ec346ca1c4cdb974c5b9a022a

    • SHA1

      1267a2106c89a13708007a259543a4bf02d74bcc

    • SHA256

      5d3f294ee37e51a1b7a21bc5cf0a51a75e1b7fc10cb74fb9fb150c4ad5280644

    • SHA512

      2f04efb69f4fd965373732bcb741fb4d6f359959ce22299b46c5bca0c6369628d103e51998f7bd19a0fe7f332e1ea984a36152f0919532cf5f12a667601207b3

    • SSDEEP

      384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK4:k98o08kxofBE+ZkXaqGbp2F2TWul0c59

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks