General

  • Target

    boatnet.x86.elf

  • Size

    29KB

  • Sample

    250129-31elxa1rgj

  • MD5

    6a92524b178bb221b0fb49a319a85b65

  • SHA1

    7c37fa23632137a3da90ac74bbdd109a42b7b9f8

  • SHA256

    36088b682fef0a0f9c138e2a37e21c4fe7587244f330e34b9b28b2c9e3ea145d

  • SHA512

    55cb961af3761ee0fb9228b273eaade7397e264a9f7f24c2aeb0c5cec9810e9c608d861cb443b5794ebf81fafc424bc921b26dba2869b6dbe124c265988976a4

  • SSDEEP

    768:fgpUvu7W+yMyjnm69gr56A4M8a4dgAM77bkuOiJnbcuyD7UoQRj2:70Flmmigrdn4dKJhJnouy8oyC

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      29KB

    • MD5

      6a92524b178bb221b0fb49a319a85b65

    • SHA1

      7c37fa23632137a3da90ac74bbdd109a42b7b9f8

    • SHA256

      36088b682fef0a0f9c138e2a37e21c4fe7587244f330e34b9b28b2c9e3ea145d

    • SHA512

      55cb961af3761ee0fb9228b273eaade7397e264a9f7f24c2aeb0c5cec9810e9c608d861cb443b5794ebf81fafc424bc921b26dba2869b6dbe124c265988976a4

    • SSDEEP

      768:fgpUvu7W+yMyjnm69gr56A4M8a4dgAM77bkuOiJnbcuyD7UoQRj2:70Flmmigrdn4dKJhJnouy8oyC

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks