General

  • Target

    boatnet.arm7.elf

  • Size

    54KB

  • Sample

    241231-vxjsfszrhv

  • MD5

    9cf763aa80feb299871df334d5f46de2

  • SHA1

    2f3f06d5778c8d8da333419c0962a0a5a84832c8

  • SHA256

    c94a0f058290df3d994f7d3c3f3793500af0f532093e92465c065aee24a9880f

  • SHA512

    ad4959f608cb799e72dc17b085d4914bd4c6fbbb8c52b9e804f014191f95a0cf0636cf455d25f6ae60cdcfffb1a0ec286421e275a92112e8fdf8092eb70ba6d9

  • SSDEEP

    768:GBcIDXUCoONGNHggX6Ig+FChj+YFFX1JiX8ZISsWboGgU9q3UELAJZka5dyY7zjW:eDjNw2KK6kbfvMGg9Lef7z81t6NM

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      54KB

    • MD5

      9cf763aa80feb299871df334d5f46de2

    • SHA1

      2f3f06d5778c8d8da333419c0962a0a5a84832c8

    • SHA256

      c94a0f058290df3d994f7d3c3f3793500af0f532093e92465c065aee24a9880f

    • SHA512

      ad4959f608cb799e72dc17b085d4914bd4c6fbbb8c52b9e804f014191f95a0cf0636cf455d25f6ae60cdcfffb1a0ec286421e275a92112e8fdf8092eb70ba6d9

    • SSDEEP

      768:GBcIDXUCoONGNHggX6Ig+FChj+YFFX1JiX8ZISsWboGgU9q3UELAJZka5dyY7zjW:eDjNw2KK6kbfvMGg9Lef7z81t6NM

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks