General

  • Target

    boatnet.x86.elf

  • Size

    28KB

  • Sample

    250119-wjkm9sypft

  • MD5

    3630b4a04d550fb036675b516a910399

  • SHA1

    7dd4e3efc4a7713d80ec4b8fbc5c0fd649038e7b

  • SHA256

    a288c8c9d8fd6c92636bef0e8acf08f0d0d20b4108af37cea8385e7ad947dc67

  • SHA512

    e33d21707d574422331610445e4fcdc08b7064f6988c022d27cc3650392940561891bd3ba7d97bc3ee1653ab818c7c815c65b2e8ffa0a14b9c6ea801da499b71

  • SSDEEP

    768:IRBY27668Fovp+Ancua60QIwkfaUZ+a3lfS0uXY:8tG6Vs60Fwks0

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      28KB

    • MD5

      3630b4a04d550fb036675b516a910399

    • SHA1

      7dd4e3efc4a7713d80ec4b8fbc5c0fd649038e7b

    • SHA256

      a288c8c9d8fd6c92636bef0e8acf08f0d0d20b4108af37cea8385e7ad947dc67

    • SHA512

      e33d21707d574422331610445e4fcdc08b7064f6988c022d27cc3650392940561891bd3ba7d97bc3ee1653ab818c7c815c65b2e8ffa0a14b9c6ea801da499b71

    • SSDEEP

      768:IRBY27668Fovp+Ancua60QIwkfaUZ+a3lfS0uXY:8tG6Vs60Fwks0

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks