General

  • Target

    193.200.78.24-boatnet.mips-2025-01-21T101458.elf

  • Size

    23KB

  • Sample

    250121-m1nxkszmev

  • MD5

    419af9271063995aa7d8e36f7b9431cc

  • SHA1

    048cefabc4702f4f301aba13a453592f862dac99

  • SHA256

    7361c9bd5f6688bc9de5c6bd9ca7164edb537ccb08aa9c7522a620d4f410fba1

  • SHA512

    eae11b558875bcd46845788e7b0a84ce9c97b80aa4909e34412bb9b9db449bd418421f14db3436adc53483737d21fe69b27a57f2098b24e27d0803d5fe01aa52

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuivmdtJgGlzDpH7uNj1JA4V:YeD8ZSWvZHZbs1row697qohQvg9vitJO

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      193.200.78.24-boatnet.mips-2025-01-21T101458.elf

    • Size

      23KB

    • MD5

      419af9271063995aa7d8e36f7b9431cc

    • SHA1

      048cefabc4702f4f301aba13a453592f862dac99

    • SHA256

      7361c9bd5f6688bc9de5c6bd9ca7164edb537ccb08aa9c7522a620d4f410fba1

    • SHA512

      eae11b558875bcd46845788e7b0a84ce9c97b80aa4909e34412bb9b9db449bd418421f14db3436adc53483737d21fe69b27a57f2098b24e27d0803d5fe01aa52

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuivmdtJgGlzDpH7uNj1JA4V:YeD8ZSWvZHZbs1row697qohQvg9vitJO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks