General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    241228-jhmd9awpgv

  • MD5

    59fbd28399cadbf72db7ed3184a3fbde

  • SHA1

    d8a2c062e6d429057487957aac23bbbb06c8fc86

  • SHA256

    7bd43c8eeb6aace1dfd14103195f103b862cc2f95f7f4d45e3c2244cef4d07cb

  • SHA512

    dbcbc177ae6808bd6e2e4ac4139216396ffa1e028995f2d02242f0936f58ec4a45d88bf7c5e4441e1cda81a940bc9fd0917917cd3564a1f1abc780e07b1b0c30

  • SSDEEP

    384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTa:k98o08kxofBE+ZkXaITbp2F2TWul0c5m

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      59fbd28399cadbf72db7ed3184a3fbde

    • SHA1

      d8a2c062e6d429057487957aac23bbbb06c8fc86

    • SHA256

      7bd43c8eeb6aace1dfd14103195f103b862cc2f95f7f4d45e3c2244cef4d07cb

    • SHA512

      dbcbc177ae6808bd6e2e4ac4139216396ffa1e028995f2d02242f0936f58ec4a45d88bf7c5e4441e1cda81a940bc9fd0917917cd3564a1f1abc780e07b1b0c30

    • SSDEEP

      384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTa:k98o08kxofBE+ZkXaITbp2F2TWul0c5m

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks