General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    250125-xw29hswrgt

  • MD5

    371a8089f0d9b997dede00d908f2d729

  • SHA1

    4dc06821ff7cec56b2bc31f788084bc1e12af2d7

  • SHA256

    02062dff2765a4d772fa31daea8de2db65ea363cebf6662fda7426fe56c93a2e

  • SHA512

    ca1706b263af403bad3872fe29977b6c78725e707eaa0fb2d4f613bfb0f7dcf75a3196a444f49ed6eeac8120df8132b073b94ee2b0d6b6f77055d6200f65d754

  • SSDEEP

    384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaHhib+502F2vwA9dWuMW21bAK1oTm:k98o08kxofBE+ZkXaEbp2F2TWul0c5Qv

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      371a8089f0d9b997dede00d908f2d729

    • SHA1

      4dc06821ff7cec56b2bc31f788084bc1e12af2d7

    • SHA256

      02062dff2765a4d772fa31daea8de2db65ea363cebf6662fda7426fe56c93a2e

    • SHA512

      ca1706b263af403bad3872fe29977b6c78725e707eaa0fb2d4f613bfb0f7dcf75a3196a444f49ed6eeac8120df8132b073b94ee2b0d6b6f77055d6200f65d754

    • SSDEEP

      384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+ZkXaHhib+502F2vwA9dWuMW21bAK1oTm:k98o08kxofBE+ZkXaEbp2F2TWul0c5Qv

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks