General

  • Target

    boatnet.arm.elf

  • Size

    21KB

  • Sample

    250108-d6gk1svkgr

  • MD5

    99f1baf590a328a8c966d4cae3b1a03d

  • SHA1

    8bc3c4d260aed5e98fbaf30133ae04ac36132bfa

  • SHA256

    ee5aae7873078f6c6e47e4c89b31dbe8215cf9e8972091e439c27471dabdb678

  • SHA512

    ec6a49771b6784de44c4ee11927a24f613bb437da72ffbfb3df4b7f1725a41ab8b46fca4cf2cc9e6cf45befb3cd8c3dd243dba58951e01592ba7430246607609

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjPehymdGUop5hp:vvQn4j+ZO5fKAlxres3Uozr

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm.elf

    • Size

      21KB

    • MD5

      99f1baf590a328a8c966d4cae3b1a03d

    • SHA1

      8bc3c4d260aed5e98fbaf30133ae04ac36132bfa

    • SHA256

      ee5aae7873078f6c6e47e4c89b31dbe8215cf9e8972091e439c27471dabdb678

    • SHA512

      ec6a49771b6784de44c4ee11927a24f613bb437da72ffbfb3df4b7f1725a41ab8b46fca4cf2cc9e6cf45befb3cd8c3dd243dba58951e01592ba7430246607609

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxjPehymdGUop5hp:vvQn4j+ZO5fKAlxres3Uozr

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks