General

  • Target

    37.114.41.228-boatnet.arm7-2025-01-22T024958.elf

  • Size

    45KB

  • Sample

    250122-dnfwrswjfl

  • MD5

    aeac3b50403a49338858c8885bfdec7a

  • SHA1

    cac05b1a8d63bfc99eee7606188def920fd8903a

  • SHA256

    1de19cb98016ae192f729b52f6e26950288673fde6201309b1db4c3256f1198c

  • SHA512

    0311fdf51df9489f25ed375d3017b288b70390888e596a4d1ef031b6c1881e8c3177439b167a2b6c4542750a09bb9675facd5f33b44174696e9c1aba1592e876

  • SSDEEP

    768:I+t3WUsD/dIRnVkOeNZXGhEWUHCxRY9q3UELrwmCcAchDU5g8O4Zw:rWFD/dIRnVT48DUHCxzLXXA4U++Zw

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      37.114.41.228-boatnet.arm7-2025-01-22T024958.elf

    • Size

      45KB

    • MD5

      aeac3b50403a49338858c8885bfdec7a

    • SHA1

      cac05b1a8d63bfc99eee7606188def920fd8903a

    • SHA256

      1de19cb98016ae192f729b52f6e26950288673fde6201309b1db4c3256f1198c

    • SHA512

      0311fdf51df9489f25ed375d3017b288b70390888e596a4d1ef031b6c1881e8c3177439b167a2b6c4542750a09bb9675facd5f33b44174696e9c1aba1592e876

    • SSDEEP

      768:I+t3WUsD/dIRnVkOeNZXGhEWUHCxRY9q3UELrwmCcAchDU5g8O4Zw:rWFD/dIRnVT48DUHCxzLXXA4U++Zw

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks