General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250121-2tc9tswjcj

  • MD5

    ca9b5723eafc6145f3f0858c8faa18f9

  • SHA1

    121e239871c4ab01d55ea50df73a0b18a76cb7e3

  • SHA256

    8726c17c4fd6d0aa8b019795e10d69bc485052c4c4aa9744fa7eeb5b20477b7b

  • SHA512

    3a4d9cc0c89b3f1bc01301d0d29caa316ad6777c7ff680172883a0a928f1961269145df269284326e2d2b8990ec8e68a81b41acb906021be8a5e68c2a3fd0c91

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiPA5mdtJgGlzDpH7uNj1J3:YeD8ZSWvZHZbs1row697qohQvg9PmitQ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      ca9b5723eafc6145f3f0858c8faa18f9

    • SHA1

      121e239871c4ab01d55ea50df73a0b18a76cb7e3

    • SHA256

      8726c17c4fd6d0aa8b019795e10d69bc485052c4c4aa9744fa7eeb5b20477b7b

    • SHA512

      3a4d9cc0c89b3f1bc01301d0d29caa316ad6777c7ff680172883a0a928f1961269145df269284326e2d2b8990ec8e68a81b41acb906021be8a5e68c2a3fd0c91

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiPA5mdtJgGlzDpH7uNj1J3:YeD8ZSWvZHZbs1row697qohQvg9PmitQ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks