General

  • Target

    45.131.111.37-boatnet.x86-2025-01-15T021335.elf

  • Size

    20KB

  • Sample

    250115-f1hx1aslay

  • MD5

    adbb25cd23cdd007d5408957ba93dd25

  • SHA1

    083e742742917c71bd70670a2ab6eebac87acdce

  • SHA256

    daa6600712a835b085958b0d703ec42a04c494a77408e200981e56b9b46db18f

  • SHA512

    7d9fd48fd768b3bb6cfcb5363aa00b2a8455324ba56f77443f095931b3298a69eafb53ac43d26081479e5a32e8175e2a5843ca1d848c05c18cf32e08802238aa

  • SSDEEP

    384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTs:k98o08kxofBE+ZkXaITbp2F2TWul0c5I

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.131.111.37-boatnet.x86-2025-01-15T021335.elf

    • Size

      20KB

    • MD5

      adbb25cd23cdd007d5408957ba93dd25

    • SHA1

      083e742742917c71bd70670a2ab6eebac87acdce

    • SHA256

      daa6600712a835b085958b0d703ec42a04c494a77408e200981e56b9b46db18f

    • SHA512

      7d9fd48fd768b3bb6cfcb5363aa00b2a8455324ba56f77443f095931b3298a69eafb53ac43d26081479e5a32e8175e2a5843ca1d848c05c18cf32e08802238aa

    • SSDEEP

      384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXadmTb+502F2vwA9dWuMW21bAK1oTs:k98o08kxofBE+ZkXaITbp2F2TWul0c5I

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks