General

  • Target

    boatnet.x86_64.elf

  • Size

    31KB

  • Sample

    250112-rxz8naynbr

  • MD5

    709b104e746f24f3b18f7a1118c18bf0

  • SHA1

    c1735eb637560a097d7a451601bb9ca2e8706e21

  • SHA256

    abbd8780d40c95322f51410e0c77e22f3cb85a1e820ce62c604d3237c24089f1

  • SHA512

    25d982fa5382a5ca8ad6820bb4021763c25bbe8ebc414043ade122529c0b1adcc10cd8fe6caa0b5ad5a4b97d9cfc80d0a15338e7422b2604dc2ecab88fcbba34

  • SSDEEP

    768:VA8sF/Ttf+pZlilsM68XATG5Th53qZSlOWmKJix07x:GjiiBzXjT53ISpmvOx

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86_64.elf

    • Size

      31KB

    • MD5

      709b104e746f24f3b18f7a1118c18bf0

    • SHA1

      c1735eb637560a097d7a451601bb9ca2e8706e21

    • SHA256

      abbd8780d40c95322f51410e0c77e22f3cb85a1e820ce62c604d3237c24089f1

    • SHA512

      25d982fa5382a5ca8ad6820bb4021763c25bbe8ebc414043ade122529c0b1adcc10cd8fe6caa0b5ad5a4b97d9cfc80d0a15338e7422b2604dc2ecab88fcbba34

    • SSDEEP

      768:VA8sF/Ttf+pZlilsM68XATG5Th53qZSlOWmKJix07x:GjiiBzXjT53ISpmvOx

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks