General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    250117-j3valaynhr

  • MD5

    313c4b235e0e62ca38eb04bfa7677e44

  • SHA1

    c31d5d0c0fa4bfa4ea2837cede424504c68ccfd3

  • SHA256

    dfd6f81327b03f5336895c6bed7bfff178a054eafef5637ccb74e7a0ac4ef4c4

  • SHA512

    0bf52b087e48b6daac55f735ae5b5af7626322db3200e72c61755d6b80234c503a02f3e35b340b70d1731fdec2054f530251504dec55497ca5877f9233ff54ad

  • SSDEEP

    384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK/:M98o08kxofBE+ZkXaqGbp2F2TWul0c5u

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      313c4b235e0e62ca38eb04bfa7677e44

    • SHA1

      c31d5d0c0fa4bfa4ea2837cede424504c68ccfd3

    • SHA256

      dfd6f81327b03f5336895c6bed7bfff178a054eafef5637ccb74e7a0ac4ef4c4

    • SHA512

      0bf52b087e48b6daac55f735ae5b5af7626322db3200e72c61755d6b80234c503a02f3e35b340b70d1731fdec2054f530251504dec55497ca5877f9233ff54ad

    • SSDEEP

      384:Mg4Lpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaqOKV14b+502F2vwA9dWuMW21bAK/:M98o08kxofBE+ZkXaqGbp2F2TWul0c5u

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks