General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    241230-1bbgvazjfp

  • MD5

    40648053c206c69674f9763fef196c6a

  • SHA1

    04f18536aed84f036d6c9f0dabcaf8bd88924826

  • SHA256

    8319d2c673442caca81b4e6ee7042dd28b8f4db9288078be16dad1d2f5946ae7

  • SHA512

    8dded6f9ccff98b321d7b45432f0fa5e433409dd9b817bad1482ffc26881fe165a1c2e2bf0562a7128df833019215b8e335ee4d1ed2f02b90b33e025c7b37269

  • SSDEEP

    384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTH:O98o08kxofBE+ZkXaITbp2F2TWul0c5z

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      40648053c206c69674f9763fef196c6a

    • SHA1

      04f18536aed84f036d6c9f0dabcaf8bd88924826

    • SHA256

      8319d2c673442caca81b4e6ee7042dd28b8f4db9288078be16dad1d2f5946ae7

    • SHA512

      8dded6f9ccff98b321d7b45432f0fa5e433409dd9b817bad1482ffc26881fe165a1c2e2bf0562a7128df833019215b8e335ee4d1ed2f02b90b33e025c7b37269

    • SSDEEP

      384:MgWLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTH:O98o08kxofBE+ZkXaITbp2F2TWul0c5z

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks