General

  • Target

    boatnet.mips.elf

  • Size

    30KB

  • Sample

    250119-wjkm9sypex

  • MD5

    4f16ad7bf124db03b82939cfae92f15e

  • SHA1

    6c6d17f48d583c5d3c002f4fc3a5390642d637fe

  • SHA256

    96d6d379169a9a89a3704fbdeebce0698200440dcd5e6d814a96f2960f463573

  • SHA512

    c01e6c9fd4475b69092e1cc6f9eaadefc54d91dffcee63c1c23f9ad3b392791f0371f841f075a948ce67f8d65387fbaef38c943d67511f9d143d83667e50c2cf

  • SSDEEP

    768:Pl8URkuRVA5YlbEVDkS5l9FmWU06ST5WQxPJgGlzDpbuR1Jh:7mabGtmWJ75XxNVJu3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      30KB

    • MD5

      4f16ad7bf124db03b82939cfae92f15e

    • SHA1

      6c6d17f48d583c5d3c002f4fc3a5390642d637fe

    • SHA256

      96d6d379169a9a89a3704fbdeebce0698200440dcd5e6d814a96f2960f463573

    • SHA512

      c01e6c9fd4475b69092e1cc6f9eaadefc54d91dffcee63c1c23f9ad3b392791f0371f841f075a948ce67f8d65387fbaef38c943d67511f9d143d83667e50c2cf

    • SSDEEP

      768:Pl8URkuRVA5YlbEVDkS5l9FmWU06ST5WQxPJgGlzDpbuR1Jh:7mabGtmWJ75XxNVJu3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks