General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250109-y87kfazpav

  • MD5

    5d6258afa5f961b3fa073a1600f092af

  • SHA1

    ecf5abcc547b8f37500e54f28158087c511fdbac

  • SHA256

    c02c87dfe25f0bb6160d1a59de44d56fd336caff5fbf7216203c54f4991a38c4

  • SHA512

    c5b305380a3ad2f923d656b3bbe68227be9ba92d55abd665e7b44f2e35380a6967f9d2cb6a5a90e1dec6b300896510adb8c160652cc29f059966d08ad89f2782

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiCXdTmdtJgGlzDpH7uNj1n:YeD8ZSWvZHZbs1row697qohQvg9GitJ8

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      5d6258afa5f961b3fa073a1600f092af

    • SHA1

      ecf5abcc547b8f37500e54f28158087c511fdbac

    • SHA256

      c02c87dfe25f0bb6160d1a59de44d56fd336caff5fbf7216203c54f4991a38c4

    • SHA512

      c5b305380a3ad2f923d656b3bbe68227be9ba92d55abd665e7b44f2e35380a6967f9d2cb6a5a90e1dec6b300896510adb8c160652cc29f059966d08ad89f2782

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiCXdTmdtJgGlzDpH7uNj1n:YeD8ZSWvZHZbs1row697qohQvg9GitJ8

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks