General

  • Target

    boatnet.mips.elf

  • Size

    31KB

  • Sample

    250113-1xrqys1mbr

  • MD5

    2f594890add432e0ba6eceeb458301ed

  • SHA1

    d8a528ba4a6e6f5fc2010c23cf8e75752c4cb91d

  • SHA256

    ca2e75b60235e8677b53d2f2442a83eecfd3f6720ecdac14d0ef7626cde68b09

  • SHA512

    841aac9a5d55dac8b7c9f91349320eb279e5086b34a179bf60c7c5c8460cc3acb4b28944e9f1e203dedf0cb0a410ae4999ff627272373758b4763d9046969409

  • SSDEEP

    768:3BHAmM1r8iRvylPd2Ww+9r8qG5Wu92uVbaMPJhCBJgGlzDpbuR1J3D:3I3Kv2oD4Ww28a4hCTVJupD

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      31KB

    • MD5

      2f594890add432e0ba6eceeb458301ed

    • SHA1

      d8a528ba4a6e6f5fc2010c23cf8e75752c4cb91d

    • SHA256

      ca2e75b60235e8677b53d2f2442a83eecfd3f6720ecdac14d0ef7626cde68b09

    • SHA512

      841aac9a5d55dac8b7c9f91349320eb279e5086b34a179bf60c7c5c8460cc3acb4b28944e9f1e203dedf0cb0a410ae4999ff627272373758b4763d9046969409

    • SSDEEP

      768:3BHAmM1r8iRvylPd2Ww+9r8qG5Wu92uVbaMPJhCBJgGlzDpbuR1J3D:3I3Kv2oD4Ww28a4hCTVJupD

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks