General

  • Target

    109.71.252.43-boatnet.arm-2024-12-28T203037.elf

  • Size

    21KB

  • Sample

    241228-zsp6wssnaj

  • MD5

    e7a22325e9ccbbad3c59f83ee4369244

  • SHA1

    5c1ee586e6b3b2c18d736078ca54fbf9d732b61b

  • SHA256

    3a4dc407c6b8c0154b5448f24f564304b1abd6ec46083db3a922dd0847cc3012

  • SHA512

    bc78c24e9fbeee9328857be5a82dd11249177263f2c177584ed06d0b0144847ec87818c07e5e6ac13b44a8bf98a8a43082797402b541f7e68ee03ad9459332e5

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHfDrIhymdGUop5hW:vvQn4j+ZO5fKAlxzDMs3Uoz4

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      109.71.252.43-boatnet.arm-2024-12-28T203037.elf

    • Size

      21KB

    • MD5

      e7a22325e9ccbbad3c59f83ee4369244

    • SHA1

      5c1ee586e6b3b2c18d736078ca54fbf9d732b61b

    • SHA256

      3a4dc407c6b8c0154b5448f24f564304b1abd6ec46083db3a922dd0847cc3012

    • SHA512

      bc78c24e9fbeee9328857be5a82dd11249177263f2c177584ed06d0b0144847ec87818c07e5e6ac13b44a8bf98a8a43082797402b541f7e68ee03ad9459332e5

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjHfDrIhymdGUop5hW:vvQn4j+ZO5fKAlxzDMs3Uoz4

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks