General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    250103-gnk29s1rgz

  • MD5

    b596061ea3f1d976a6314afe769a9c34

  • SHA1

    8853bfb626868c32a999a883fed4eb704fe28c11

  • SHA256

    b2f70bb7d7dac80bf956d563f6e97e65909e2b5e08e9e0022c1f621693f8ccbd

  • SHA512

    647f02d5e52e7a0ca155ed989dd564d721d332767236c7e2cab55847e613e1dd104fbdca6fe5f2fa70d3e5a33b1492152cbe48e477a3221ad1aabe3328f7b0df

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3THP9q3UELbUXfi6nVMQHI4vcGpv+:gECFd+A6YHAxTeLRQZ+

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      b596061ea3f1d976a6314afe769a9c34

    • SHA1

      8853bfb626868c32a999a883fed4eb704fe28c11

    • SHA256

      b2f70bb7d7dac80bf956d563f6e97e65909e2b5e08e9e0022c1f621693f8ccbd

    • SHA512

      647f02d5e52e7a0ca155ed989dd564d721d332767236c7e2cab55847e613e1dd104fbdca6fe5f2fa70d3e5a33b1492152cbe48e477a3221ad1aabe3328f7b0df

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3THP9q3UELbUXfi6nVMQHI4vcGpv+:gECFd+A6YHAxTeLRQZ+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks