General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    241228-zyay6asnem

  • MD5

    ab2fbe986d21bc0ebcbd76380975abb5

  • SHA1

    0ec4cc31edfbd84f8be7665038b23226cfe2cbfa

  • SHA256

    e61be77e890a8cabc3bfec03513492a451ecb4b5bb44d716a6d4caefa50c8047

  • SHA512

    593953a62955243982588ff1bcbc3655a5f50fd77850972fb014a3fd988811250d237f7a050be85b21c2cec25b9fb35ccdac30bec21ce54ac1d6fed4ba622bc1

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiYmdtJgGlzDpH7uNj1JA4G:YeD8ZSWvZHZbs1row697qohQvg9YitJN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      ab2fbe986d21bc0ebcbd76380975abb5

    • SHA1

      0ec4cc31edfbd84f8be7665038b23226cfe2cbfa

    • SHA256

      e61be77e890a8cabc3bfec03513492a451ecb4b5bb44d716a6d4caefa50c8047

    • SHA512

      593953a62955243982588ff1bcbc3655a5f50fd77850972fb014a3fd988811250d237f7a050be85b21c2cec25b9fb35ccdac30bec21ce54ac1d6fed4ba622bc1

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiYmdtJgGlzDpH7uNj1JA4G:YeD8ZSWvZHZbs1row697qohQvg9YitJN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks