General

  • Target

    45.11.229.95-boatnet.arm7-2025-01-19T022231.elf

  • Size

    53KB

  • Sample

    250119-es4daswlgk

  • MD5

    d3933f1cd5e7633906774078e050ca4f

  • SHA1

    df8bddfc958fabc7c0105df9769b7a76ab3b1bcd

  • SHA256

    131909f6e594c6b3199b32959ec4d128a9f4ea72d836e21a6bd9a3cc4e51bdfc

  • SHA512

    6fa8a5425b641ed0968faabd6ad6b4e061d8946573f3cecad59aaa27cca56fc6fe4d2449d54f7b10efef5c6da6d61aa783137854a6edc82543113b3fbc3f90d1

  • SSDEEP

    768:/GJrriWrm5118Y+4xTuNqAcpPUQVvaLy9eu/bcpQhsNe6jwFy9q3UELaLaMe25Ra:/GripJhhxeRpBjwVLwOLN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.11.229.95-boatnet.arm7-2025-01-19T022231.elf

    • Size

      53KB

    • MD5

      d3933f1cd5e7633906774078e050ca4f

    • SHA1

      df8bddfc958fabc7c0105df9769b7a76ab3b1bcd

    • SHA256

      131909f6e594c6b3199b32959ec4d128a9f4ea72d836e21a6bd9a3cc4e51bdfc

    • SHA512

      6fa8a5425b641ed0968faabd6ad6b4e061d8946573f3cecad59aaa27cca56fc6fe4d2449d54f7b10efef5c6da6d61aa783137854a6edc82543113b3fbc3f90d1

    • SSDEEP

      768:/GJrriWrm5118Y+4xTuNqAcpPUQVvaLy9eu/bcpQhsNe6jwFy9q3UELaLaMe25Ra:/GripJhhxeRpBjwVLwOLN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks