General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    250121-2tc9tswjck

  • MD5

    e4fbf2788f35a0195248ac665ccb5481

  • SHA1

    f059d2748b8641740a48c03f67681df88d988dbd

  • SHA256

    ae4bea1a68ba39315a25dbac371b7693d561e7eeb6932bdb7851146b25b6ce4a

  • SHA512

    ffa2dd0b96213adbe5c14e6c1a8c2cb193493f18c3715af307d2aa3380fbad0aac72a15222b5a3233debad6bf3d87d469d60f77d33aa7bbecef3a61c8d2a81fd

  • SSDEEP

    768:S/TYCoIxdEk+AxoTZAZHFeq8b3/E9q3UELbUXfi6nVMQHI4vcGpvZ:SECFd+A6YHAxFLRQZZ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      e4fbf2788f35a0195248ac665ccb5481

    • SHA1

      f059d2748b8641740a48c03f67681df88d988dbd

    • SHA256

      ae4bea1a68ba39315a25dbac371b7693d561e7eeb6932bdb7851146b25b6ce4a

    • SHA512

      ffa2dd0b96213adbe5c14e6c1a8c2cb193493f18c3715af307d2aa3380fbad0aac72a15222b5a3233debad6bf3d87d469d60f77d33aa7bbecef3a61c8d2a81fd

    • SSDEEP

      768:S/TYCoIxdEk+AxoTZAZHFeq8b3/E9q3UELbUXfi6nVMQHI4vcGpvZ:SECFd+A6YHAxFLRQZZ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks