General

  • Target

    boatnet.mips.elf

  • Size

    21KB

  • Sample

    250113-hxm4natrbr

  • MD5

    eb27ffa35ae33dc6cafa6a0aab739e07

  • SHA1

    e85f03dd6f3850d98857ef1df900e05022723d91

  • SHA256

    8724343245c1e43f3ea1d6e04f75259b4de07f96de3fe3d3d2afb28951c3c994

  • SHA512

    574212fbdff518187ff22f721d96cebed694a1b78cac2c86907a6b62f6f46390c5cf54a37ba2725ef38155d40621d0d1b36da74560834d5aaa180f9ec221ed2a

  • SSDEEP

    384:1B2MKiOEHNDGDv97jPqnFgzUgwjP1L3se2Vb529qcAgtGliHJgGlzDpH7uNj1JKc:9KEHJK5PMuo5nOV2BA0HJgGlzDpbuR1Z

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      21KB

    • MD5

      eb27ffa35ae33dc6cafa6a0aab739e07

    • SHA1

      e85f03dd6f3850d98857ef1df900e05022723d91

    • SHA256

      8724343245c1e43f3ea1d6e04f75259b4de07f96de3fe3d3d2afb28951c3c994

    • SHA512

      574212fbdff518187ff22f721d96cebed694a1b78cac2c86907a6b62f6f46390c5cf54a37ba2725ef38155d40621d0d1b36da74560834d5aaa180f9ec221ed2a

    • SSDEEP

      384:1B2MKiOEHNDGDv97jPqnFgzUgwjP1L3se2Vb529qcAgtGliHJgGlzDpH7uNj1JKc:9KEHJK5PMuo5nOV2BA0HJgGlzDpbuR1Z

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks