General

  • Target

    boatnet.mips.elf

  • Size

    31KB

  • Sample

    250130-afzr5atke1

  • MD5

    a3f3778643c6a91419d6f816e3c5276a

  • SHA1

    315ee49ad3c63d2d06ed459023cce08d2a8df9cc

  • SHA256

    df53be32419476d16ae7ea65a6250bf34d49488e74116ef18cebbe3ffb866a7b

  • SHA512

    68d76dba589e9ce70b320a521372046adeff79001a6d09078cac629b203a4fb850ffa5619edc5fe2ea412e9e5bad3a0ac4511d30aa37e02d7dbd91490ff4daa8

  • SSDEEP

    768:CkGVUFmXbht/vrCgNEAXtKWNcuOTl2N6IFGaMJgGlzDpbuR1JS:F0XbveAXtKkOTkN6hNVJuY

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      31KB

    • MD5

      a3f3778643c6a91419d6f816e3c5276a

    • SHA1

      315ee49ad3c63d2d06ed459023cce08d2a8df9cc

    • SHA256

      df53be32419476d16ae7ea65a6250bf34d49488e74116ef18cebbe3ffb866a7b

    • SHA512

      68d76dba589e9ce70b320a521372046adeff79001a6d09078cac629b203a4fb850ffa5619edc5fe2ea412e9e5bad3a0ac4511d30aa37e02d7dbd91490ff4daa8

    • SSDEEP

      768:CkGVUFmXbht/vrCgNEAXtKWNcuOTl2N6IFGaMJgGlzDpbuR1JS:F0XbveAXtKkOTkN6hNVJuY

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks