General

  • Target

    boatnet.arm7.elf

  • Size

    44KB

  • Sample

    250113-hxm4natrcp

  • MD5

    d0d3f0c88467e00d566c8df506a581f4

  • SHA1

    579f0b997a9f8f5927c0e604eafcfc62c13bc9d4

  • SHA256

    e7884efe04e7a7c59ea2ae85c6d67be88bbf140d10093b7598067142a4f5017e

  • SHA512

    64ceebef3ecd8d119f1a447f7633dba0a64a8eb6c8ad1b4831e5fb718d37e1c72a5c8d6f5638503b5f241bf5e57e06dea29790a8bf27328e37d7a9590430b314

  • SSDEEP

    768:yYVcaSwvMgP95V2jK/yg2myaZ1xp5wsFa9G9q3UELL851ZScEVeoE+GN4KYy:3VcaR9r+0ydzaZ1x/JFKrLQ1Z9dJYy

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      44KB

    • MD5

      d0d3f0c88467e00d566c8df506a581f4

    • SHA1

      579f0b997a9f8f5927c0e604eafcfc62c13bc9d4

    • SHA256

      e7884efe04e7a7c59ea2ae85c6d67be88bbf140d10093b7598067142a4f5017e

    • SHA512

      64ceebef3ecd8d119f1a447f7633dba0a64a8eb6c8ad1b4831e5fb718d37e1c72a5c8d6f5638503b5f241bf5e57e06dea29790a8bf27328e37d7a9590430b314

    • SSDEEP

      768:yYVcaSwvMgP95V2jK/yg2myaZ1xp5wsFa9G9q3UELL851ZScEVeoE+GN4KYy:3VcaR9r+0ydzaZ1x/JFKrLQ1Z9dJYy

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks