General

  • Target

    45.11.229.95-boatnet.mpsl-2025-01-19T033736.elf

  • Size

    32KB

  • Sample

    250119-f7lx8sxrdq

  • MD5

    99f634fcc779931749c366bc58c21de1

  • SHA1

    e026d03b8ba00fcb4d47bc3e7f390882abd0aa9c

  • SHA256

    f3a0987e3358c9f6945c66249f6fa003d78ee4912296c1da598ff17ff2e773f1

  • SHA512

    3fd232d383ae86f53a971b3de7ee16740e105f8b19fc7a3c679d924644dea2d482983c4576ca105ef94b103446436efab67fa1efbb88291feb40531dd8b5efe7

  • SSDEEP

    768:cI8rE/hON9MkI4bOEl5AUxzcZbFRiPA7KFjDv8kLWnG:QgONKktbNl5xl4FRiPAGFjTQG

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      45.11.229.95-boatnet.mpsl-2025-01-19T033736.elf

    • Size

      32KB

    • MD5

      99f634fcc779931749c366bc58c21de1

    • SHA1

      e026d03b8ba00fcb4d47bc3e7f390882abd0aa9c

    • SHA256

      f3a0987e3358c9f6945c66249f6fa003d78ee4912296c1da598ff17ff2e773f1

    • SHA512

      3fd232d383ae86f53a971b3de7ee16740e105f8b19fc7a3c679d924644dea2d482983c4576ca105ef94b103446436efab67fa1efbb88291feb40531dd8b5efe7

    • SSDEEP

      768:cI8rE/hON9MkI4bOEl5AUxzcZbFRiPA7KFjDv8kLWnG:QgONKktbNl5xl4FRiPAGFjTQG

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks