General

  • Target

    96.62.214.33-boatnet.mips-2025-01-21T181626.elf

  • Size

    30KB

  • Sample

    250121-xw36taxmav

  • MD5

    59188394da0c09353ea431a39f0c7c36

  • SHA1

    9eb89f80f4c68370f630bb827f00717c4776098f

  • SHA256

    a298a818620d048e87c02b39905f39d7d2b9d0945a64980b202d931fda5cff78

  • SHA512

    56b14e937cd653a0346740f4ceb02c9c60c049ddd09c5f714b461c85482859c66e6ed2973aa9347f11e539f15381be3c180eacddbb685d16d16d76bb95fae3e2

  • SSDEEP

    768:0QsFoLUQUfRbaYdcHUwahED0gnAN99kJsQOwHn2GrrJgGlzDpbuR1JNl3:q4QfRddwahw0geVhwH2kVJuV3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      96.62.214.33-boatnet.mips-2025-01-21T181626.elf

    • Size

      30KB

    • MD5

      59188394da0c09353ea431a39f0c7c36

    • SHA1

      9eb89f80f4c68370f630bb827f00717c4776098f

    • SHA256

      a298a818620d048e87c02b39905f39d7d2b9d0945a64980b202d931fda5cff78

    • SHA512

      56b14e937cd653a0346740f4ceb02c9c60c049ddd09c5f714b461c85482859c66e6ed2973aa9347f11e539f15381be3c180eacddbb685d16d16d76bb95fae3e2

    • SSDEEP

      768:0QsFoLUQUfRbaYdcHUwahED0gnAN99kJsQOwHn2GrrJgGlzDpbuR1JNl3:q4QfRddwahw0geVhwH2kVJuV3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks