General

  • Target

    boatnet.arm7.elf

  • Size

    53KB

  • Sample

    250113-11yzfaynf1

  • MD5

    0444c5a3c5bdf13335e10a8b3d849914

  • SHA1

    131304b4f1678a432cb26defc7bedbbc64b27aee

  • SHA256

    4352893a74a1349447fe6d909fdbe0a9b217d3479e258e8873defb4ce60263dd

  • SHA512

    fa2b190914d924896f3780edd74316596288e3f77a6a1bc1d497fde823dfd0ed5ae21e88e5c06ab75d76bc9239a49f19c2198e12dc99f8d314ac2b08677bebe8

  • SSDEEP

    768:yGJrriWrm5118Y+4xTuNqAcpPUQVvaLy9eu/bcpQhsNe6LFHn9q3UELaLaMe25R3:yGripJhhxeRpBt2LwOLw

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      53KB

    • MD5

      0444c5a3c5bdf13335e10a8b3d849914

    • SHA1

      131304b4f1678a432cb26defc7bedbbc64b27aee

    • SHA256

      4352893a74a1349447fe6d909fdbe0a9b217d3479e258e8873defb4ce60263dd

    • SHA512

      fa2b190914d924896f3780edd74316596288e3f77a6a1bc1d497fde823dfd0ed5ae21e88e5c06ab75d76bc9239a49f19c2198e12dc99f8d314ac2b08677bebe8

    • SSDEEP

      768:yGJrriWrm5118Y+4xTuNqAcpPUQVvaLy9eu/bcpQhsNe6LFHn9q3UELaLaMe25R3:yGripJhhxeRpBt2LwOLw

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks