General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250108-d6gk1ssmhz

  • MD5

    45a1bc49d2057a02ea0d323870315d86

  • SHA1

    beb3c0a13a18bc1dbcdb3720b144a7ee0b74ba65

  • SHA256

    a921de71608f395ed0d91c9993eeeef47e947b58ba01ebf9cb589e6f49b542d2

  • SHA512

    ef28da228c2516a69351c11435e3dba5a30dd39b4cb751658c5cd2380b53162475d8f32c693a0b50da237784eda7499dc7dd5b76ae7bdba4670eab4d0fbec773

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiBamdtJgGlzDpH7uNj1JAV:YeD8ZSWvZHZbs1row697qohQvg9EitJ7

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      45a1bc49d2057a02ea0d323870315d86

    • SHA1

      beb3c0a13a18bc1dbcdb3720b144a7ee0b74ba65

    • SHA256

      a921de71608f395ed0d91c9993eeeef47e947b58ba01ebf9cb589e6f49b542d2

    • SHA512

      ef28da228c2516a69351c11435e3dba5a30dd39b4cb751658c5cd2380b53162475d8f32c693a0b50da237784eda7499dc7dd5b76ae7bdba4670eab4d0fbec773

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiBamdtJgGlzDpH7uNj1JAV:YeD8ZSWvZHZbs1row697qohQvg9EitJ7

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks