General

  • Target

    boatnet.mips.elf

  • Size

    30KB

  • Sample

    241231-paandasjbl

  • MD5

    57d9dd04cc69d14542597b2bcfa56fc1

  • SHA1

    bd8fd9f4ea3bed7bd78c369a660c52d1cf275e59

  • SHA256

    4c0ab9d6fe4cb26e5de43d07f6092e7848c1a53b9dc2561bbc133a3027e57736

  • SHA512

    46bed754083dbaf6e348e9b8a70741bdcefd2d40fba12679edbbd30f552646bee26a499afe13c138e7f6b16fec534986cb685b9da91841d0deca560e83c0d29c

  • SSDEEP

    768:gxqvfZk5zP1HDd+OMKCqCSeslM4nVJgGlzDpbuR1Jd:3vgzPdMOMKCtEl/VJuf

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      30KB

    • MD5

      57d9dd04cc69d14542597b2bcfa56fc1

    • SHA1

      bd8fd9f4ea3bed7bd78c369a660c52d1cf275e59

    • SHA256

      4c0ab9d6fe4cb26e5de43d07f6092e7848c1a53b9dc2561bbc133a3027e57736

    • SHA512

      46bed754083dbaf6e348e9b8a70741bdcefd2d40fba12679edbbd30f552646bee26a499afe13c138e7f6b16fec534986cb685b9da91841d0deca560e83c0d29c

    • SSDEEP

      768:gxqvfZk5zP1HDd+OMKCqCSeslM4nVJgGlzDpbuR1Jd:3vgzPdMOMKCtEl/VJuf

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks