General

  • Target

    boatnet.arm7.elf

  • Size

    53KB

  • Sample

    250129-3svyxs1qck

  • MD5

    811c0035dd91ef213c4336662257aeba

  • SHA1

    9d8fa7212750a6840dd820c1be666f93a60fbea0

  • SHA256

    8a1616672fe3295e40f2d68ccb7a6b4c4e50ee8a32210d65eb465c352143b37c

  • SHA512

    a49709d22ae9e484daa0f3d642054396ebb8ddd040c883cbecd837929b5bae06febff7141de33bd42275b370849f58c4023363c2922b94a7708f1ac9d86fca61

  • SSDEEP

    768:SJRWBUhe0InSZiJCdfPGGOaVk/+wWpBeFPXDCAyeoAeE9q3UELDLaMcOSmI3aay:S3WTvSpfZg+wWatzJyeILRSmI3aay

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      53KB

    • MD5

      811c0035dd91ef213c4336662257aeba

    • SHA1

      9d8fa7212750a6840dd820c1be666f93a60fbea0

    • SHA256

      8a1616672fe3295e40f2d68ccb7a6b4c4e50ee8a32210d65eb465c352143b37c

    • SHA512

      a49709d22ae9e484daa0f3d642054396ebb8ddd040c883cbecd837929b5bae06febff7141de33bd42275b370849f58c4023363c2922b94a7708f1ac9d86fca61

    • SSDEEP

      768:SJRWBUhe0InSZiJCdfPGGOaVk/+wWpBeFPXDCAyeoAeE9q3UELDLaMcOSmI3aay:S3WTvSpfZg+wWatzJyeILRSmI3aay

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks