General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    250125-s77ads1ldr

  • MD5

    447250cf8f5a2530ab2591e983c0783e

  • SHA1

    33fd6c02928ecdd8209120ea0ca3da856f868886

  • SHA256

    fd780f0843744706100c92a4048002e784acbb16019a75d97732560a6773d189

  • SHA512

    b7bceae7b886394bfa6973340e107dc5add6d9b2fe76d8a3bf645fb72882170d11931fc4d5af34ddd03c6c73b1561f376b8973f80a5a8122f25f846995cca5df

  • SSDEEP

    768:g/TYCoIxdEk+AxoTZAZHFeq8b3d89q3UELbUXfi6nVMQHI4vcGpvK:gECFd+A6YHAxdFLRQZK

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      447250cf8f5a2530ab2591e983c0783e

    • SHA1

      33fd6c02928ecdd8209120ea0ca3da856f868886

    • SHA256

      fd780f0843744706100c92a4048002e784acbb16019a75d97732560a6773d189

    • SHA512

      b7bceae7b886394bfa6973340e107dc5add6d9b2fe76d8a3bf645fb72882170d11931fc4d5af34ddd03c6c73b1561f376b8973f80a5a8122f25f846995cca5df

    • SSDEEP

      768:g/TYCoIxdEk+AxoTZAZHFeq8b3d89q3UELbUXfi6nVMQHI4vcGpvK:gECFd+A6YHAxdFLRQZK

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks