General

  • Target

    193.200.78.24-boatnet.arm7-2025-01-21T101455.elf

  • Size

    45KB

  • Sample

    250121-m1nxkszrcl

  • MD5

    ef0ed5900913788d9a7d956c1f166ef3

  • SHA1

    607fa5a7a3e908b5bf3a3fda43ca62d366f14203

  • SHA256

    971b15d0d74811c111cc9b95f1cad309377e44e79706b0a890fb38a20cdcddf3

  • SHA512

    954a0cbe6455772801aa585bb18351226324f3a676f5d45c66b31e2545daeba28979911247a9ceb0154a1b494ce84ce0fc3db389cd191d136d11377e16e0530f

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3e49q3UELbUXfi6nVMQHI4vcGpv8:DECFd+A6YHAxehLRQZ8

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      193.200.78.24-boatnet.arm7-2025-01-21T101455.elf

    • Size

      45KB

    • MD5

      ef0ed5900913788d9a7d956c1f166ef3

    • SHA1

      607fa5a7a3e908b5bf3a3fda43ca62d366f14203

    • SHA256

      971b15d0d74811c111cc9b95f1cad309377e44e79706b0a890fb38a20cdcddf3

    • SHA512

      954a0cbe6455772801aa585bb18351226324f3a676f5d45c66b31e2545daeba28979911247a9ceb0154a1b494ce84ce0fc3db389cd191d136d11377e16e0530f

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3e49q3UELbUXfi6nVMQHI4vcGpv8:DECFd+A6YHAxehLRQZ8

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks