General

  • Target

    boatnet.mips.elf

  • Size

    30KB

  • Sample

    241231-trclhs1kcp

  • MD5

    877956f4ad3eb49fbbbdf6b0edb970de

  • SHA1

    4c412c3533bcda95ac61ded6eb2c7d1116079298

  • SHA256

    18c8beab6e195dffe861b08dfbe78046e7ade25f06273cbfcc9b9215beef0b51

  • SHA512

    246d231b1db303521c8271dc95c24fe40e32b353647c427eb2efcfc9dcd2cbfa460dd00ed9713ffc35d278cc572575fa80f1338fb20dfff459807d5fef2600a4

  • SSDEEP

    768:1p0cQWf7Bz2iEgdswDzB1rMGxYI7GgjNDgaJgGlzDpbuR1Jv:1p7CMdL7S+VJut

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      30KB

    • MD5

      877956f4ad3eb49fbbbdf6b0edb970de

    • SHA1

      4c412c3533bcda95ac61ded6eb2c7d1116079298

    • SHA256

      18c8beab6e195dffe861b08dfbe78046e7ade25f06273cbfcc9b9215beef0b51

    • SHA512

      246d231b1db303521c8271dc95c24fe40e32b353647c427eb2efcfc9dcd2cbfa460dd00ed9713ffc35d278cc572575fa80f1338fb20dfff459807d5fef2600a4

    • SSDEEP

      768:1p0cQWf7Bz2iEgdswDzB1rMGxYI7GgjNDgaJgGlzDpbuR1Jv:1p7CMdL7S+VJut

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks