General

  • Target

    boatnet.arm7.elf

  • Size

    52KB

  • Sample

    250119-wmftgszlgl

  • MD5

    b2c5f835d54c4829e8f062e3e0f4f8a6

  • SHA1

    e3b0b074c60927ddee00eef66939dd93540bc158

  • SHA256

    ef6879e75ae0fa91215a456ab9411576fb46d9e701c81c3dd03ae530b63d089f

  • SHA512

    ec27677784dd7ce10ba8efed5b3d1e2dbb795bb6c037e10d5273b42fc1a5432055e7f78f97570359de3733c7b091fee7cfe6a542f46b046bb68f7578e1aa494b

  • SSDEEP

    1536:qjzYAnr5oMZomQkE3dGQ+LLmyBGkKRKoMYj:d0VZHE3dGQ+L6dlMYj

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      52KB

    • MD5

      b2c5f835d54c4829e8f062e3e0f4f8a6

    • SHA1

      e3b0b074c60927ddee00eef66939dd93540bc158

    • SHA256

      ef6879e75ae0fa91215a456ab9411576fb46d9e701c81c3dd03ae530b63d089f

    • SHA512

      ec27677784dd7ce10ba8efed5b3d1e2dbb795bb6c037e10d5273b42fc1a5432055e7f78f97570359de3733c7b091fee7cfe6a542f46b046bb68f7578e1aa494b

    • SSDEEP

      1536:qjzYAnr5oMZomQkE3dGQ+LLmyBGkKRKoMYj:d0VZHE3dGQ+L6dlMYj

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks