General

  • Target

    185.232.205.45-boatnet.mips-2025-01-03T235945.elf

  • Size

    23KB

  • Sample

    250104-ag6xtstjfm

  • MD5

    d99b45f2b169bb86b1d9e71192c3b6ea

  • SHA1

    48552a2a77d46b2300e8923797eb6e0222853153

  • SHA256

    b3d75dd9e223eb37d623996fb495fab727c39b77544a5a61b2af1559479b2d89

  • SHA512

    f04906c7c4ae7744b497ebc1ebdde93ee346de7bebda0be7db79c685b2113cc002e9a79ad8b290036ef7c6e466f60f93231640577f9f1e47aeaab1dc76a135c6

  • SSDEEP

    384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiupQmdzJgGlzDpH7uNj1J8:neD8ZSWvZHZbs1row697qohQvg9vizJV

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      185.232.205.45-boatnet.mips-2025-01-03T235945.elf

    • Size

      23KB

    • MD5

      d99b45f2b169bb86b1d9e71192c3b6ea

    • SHA1

      48552a2a77d46b2300e8923797eb6e0222853153

    • SHA256

      b3d75dd9e223eb37d623996fb495fab727c39b77544a5a61b2af1559479b2d89

    • SHA512

      f04906c7c4ae7744b497ebc1ebdde93ee346de7bebda0be7db79c685b2113cc002e9a79ad8b290036ef7c6e466f60f93231640577f9f1e47aeaab1dc76a135c6

    • SSDEEP

      384:neD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiupQmdzJgGlzDpH7uNj1J8:neD8ZSWvZHZbs1row697qohQvg9vizJV

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks