General

  • Target

    185.232.205.45-boatnet.arm-2025-01-03T235946.elf

  • Size

    21KB

  • Sample

    250104-ag6xts1kas

  • MD5

    b435bea977ff7ad67adfc540a5727558

  • SHA1

    fe21c0d1e31dac1b5b6ea3a167c2a2a8f6218f2a

  • SHA256

    efe6416008e12f82ffe38db7aaeaa4575e0e6374b87681f2b1e8183348918848

  • SHA512

    8e9f72b8b677d793cf8717fd7a4662b01c180093aa4e9a18e8de333dfc71cddcf3b001b35874f61a4931f1225313796a077e28a80b99f9cdf3cb70abf120d05d

  • SSDEEP

    384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjz1nL4hymdGUop5hX:UvQn4j+ZO5fKAlxP1nL4s3UozV

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      185.232.205.45-boatnet.arm-2025-01-03T235946.elf

    • Size

      21KB

    • MD5

      b435bea977ff7ad67adfc540a5727558

    • SHA1

      fe21c0d1e31dac1b5b6ea3a167c2a2a8f6218f2a

    • SHA256

      efe6416008e12f82ffe38db7aaeaa4575e0e6374b87681f2b1e8183348918848

    • SHA512

      8e9f72b8b677d793cf8717fd7a4662b01c180093aa4e9a18e8de333dfc71cddcf3b001b35874f61a4931f1225313796a077e28a80b99f9cdf3cb70abf120d05d

    • SSDEEP

      384:UvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjz1nL4hymdGUop5hX:UvQn4j+ZO5fKAlxP1nL4s3UozV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks