General

  • Target

    45.200.149.186-boatnet.arm-2024-12-28T012300.elf

  • Size

    21KB

  • Sample

    241228-cl9kmatndt

  • MD5

    3eda2f6680311edb6fde1cbb70c1377a

  • SHA1

    0a5eff32c5116c1d67056fa29ff09a9371d0c29e

  • SHA256

    b59927d9759ef2ac0c2e6365b0d5c14bd24d410a3af35183dbae35d496dcc93f

  • SHA512

    bf400c45c655077e56c8645ba4cf2999215aa2504664fa38477a4b7abadaf9975ac764fb38ea6cf32a7d5a84451a54da5f89e6bf204dfd77c3c409a7c0f0e20d

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHhymdGUop5hw:vvQn4j+ZO5fKAlxLs3Uozi

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.200.149.186-boatnet.arm-2024-12-28T012300.elf

    • Size

      21KB

    • MD5

      3eda2f6680311edb6fde1cbb70c1377a

    • SHA1

      0a5eff32c5116c1d67056fa29ff09a9371d0c29e

    • SHA256

      b59927d9759ef2ac0c2e6365b0d5c14bd24d410a3af35183dbae35d496dcc93f

    • SHA512

      bf400c45c655077e56c8645ba4cf2999215aa2504664fa38477a4b7abadaf9975ac764fb38ea6cf32a7d5a84451a54da5f89e6bf204dfd77c3c409a7c0f0e20d

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHhymdGUop5hw:vvQn4j+ZO5fKAlxLs3Uozi

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks