General

  • Target

    boatnet.arm.elf

  • Size

    21KB

  • Sample

    250108-yrh6hs1mcx

  • MD5

    58900fed7952b294f7b057ff63552ea1

  • SHA1

    f81ad72565776a5c61401c4f9eacfefe12a6212b

  • SHA256

    30e3f1d3cb76c4dff47828f0ab9c44d630edf08045592cf3dca3d635022a4ed8

  • SHA512

    4d4f535983585ae2b6b18f87a74e4362394896e1427f1bb9d95877ed33b99a2824bb4a1cbb1279c4955cc1ddbd695fb2519252d68d8fcb325146592a818106fa

  • SSDEEP

    384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxje+hymdGUop5hW:vvQn4j+ZO5fKAlx6+s3Uozk

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm.elf

    • Size

      21KB

    • MD5

      58900fed7952b294f7b057ff63552ea1

    • SHA1

      f81ad72565776a5c61401c4f9eacfefe12a6212b

    • SHA256

      30e3f1d3cb76c4dff47828f0ab9c44d630edf08045592cf3dca3d635022a4ed8

    • SHA512

      4d4f535983585ae2b6b18f87a74e4362394896e1427f1bb9d95877ed33b99a2824bb4a1cbb1279c4955cc1ddbd695fb2519252d68d8fcb325146592a818106fa

    • SSDEEP

      384:vvtIoZxrSniaXs+qx+bwqPX+VOcFd5fHq52lxje+hymdGUop5hW:vvQn4j+ZO5fKAlx6+s3Uozk

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks