General

  • Target

    45.11.229.95-boatnet.mips-2025-01-19T022229.elf

  • Size

    31KB

  • Sample

    250119-ezadsswndm

  • MD5

    1804ad27b494fb674f4f0d83cd20a767

  • SHA1

    d42336d77e6ef88d69b8b22e0e9ef9b53c34b699

  • SHA256

    dd6fd9bd44527766554872898b3eefe68a404893d4e21c00dda14545e415dc8a

  • SHA512

    d838d7bbb53e5a5e6e25f48269357a922126c578b793dd53c18c41c4e7a6a093e304546b95d3ebb472441d3c9ce82b5b0201b7c8af3e3b22ff1b06e2289f9412

  • SSDEEP

    768:3BHAmM1r8iRvylPd2Ww+9r8qG5Wu92uVbaMPA6eJgGlzDpbuR1JB:3I3Kv2oD4Ww28aZ6KVJun

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.11.229.95-boatnet.mips-2025-01-19T022229.elf

    • Size

      31KB

    • MD5

      1804ad27b494fb674f4f0d83cd20a767

    • SHA1

      d42336d77e6ef88d69b8b22e0e9ef9b53c34b699

    • SHA256

      dd6fd9bd44527766554872898b3eefe68a404893d4e21c00dda14545e415dc8a

    • SHA512

      d838d7bbb53e5a5e6e25f48269357a922126c578b793dd53c18c41c4e7a6a093e304546b95d3ebb472441d3c9ce82b5b0201b7c8af3e3b22ff1b06e2289f9412

    • SSDEEP

      768:3BHAmM1r8iRvylPd2Ww+9r8qG5Wu92uVbaMPA6eJgGlzDpbuR1JB:3I3Kv2oD4Ww28aZ6KVJun

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks