General

  • Target

    37.114.41.228-boatnet.arm-2025-01-22T024958.elf

  • Size

    21KB

  • Sample

    250122-dnfwrsvnez

  • MD5

    5c3bbfb420acd9bd904f458fa9cb78b6

  • SHA1

    764465629929362c66bba209a2585d312f523b34

  • SHA256

    a019845c30f3122f23e76d7dc3f98de6e7d61c47fc5e4a494e1354ade63eafaf

  • SHA512

    8e47dfd8f4cb980bad6094a2afcbc74e0bfa5a2bc8223ec8e1388a1df8ed4bc0165773f91e58c20446cc5720f0a3d568ae91ac4bdc5a697177257cdf4aafce73

  • SSDEEP

    384:cKNu+Vl2txfVHJBKPgd5AqzFpEhNCS5RVy+CY2/gQ6ipMNmqhymdGUop5hx:ciVnmtpIyLzAhIyRVFY/gtimmqs3Uozz

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      37.114.41.228-boatnet.arm-2025-01-22T024958.elf

    • Size

      21KB

    • MD5

      5c3bbfb420acd9bd904f458fa9cb78b6

    • SHA1

      764465629929362c66bba209a2585d312f523b34

    • SHA256

      a019845c30f3122f23e76d7dc3f98de6e7d61c47fc5e4a494e1354ade63eafaf

    • SHA512

      8e47dfd8f4cb980bad6094a2afcbc74e0bfa5a2bc8223ec8e1388a1df8ed4bc0165773f91e58c20446cc5720f0a3d568ae91ac4bdc5a697177257cdf4aafce73

    • SSDEEP

      384:cKNu+Vl2txfVHJBKPgd5AqzFpEhNCS5RVy+CY2/gQ6ipMNmqhymdGUop5hx:ciVnmtpIyLzAhIyRVFY/gtimmqs3Uozz

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks