General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250130-ksqp4aykhl

  • MD5

    5fb900af5c4737d28325c534f9851f9c

  • SHA1

    165894a45795538ae093c952d6a48767f8ce09df

  • SHA256

    fe6ba55fe185d350b784890adc8130d74fabd4b1180b2efea087f3dc4975ad09

  • SHA512

    34a12b3b0d7d5a2fbee89f995fa5eced1c2d1a1f6dca5fea004d0abc07a898ed736e5d9bd76b5cb5a56d0899b9b60e6196684531e5a8192f739f735b5a40cfd5

  • SSDEEP

    384:8MCnsnTaIwsGkZKN274B0GBd+h5cBHrdwQm8Vmr6JgGlzDpH7uNj1JAT:EnsnqsLy0GBd+h5cBBwQxVk6JgGlzDph

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      5fb900af5c4737d28325c534f9851f9c

    • SHA1

      165894a45795538ae093c952d6a48767f8ce09df

    • SHA256

      fe6ba55fe185d350b784890adc8130d74fabd4b1180b2efea087f3dc4975ad09

    • SHA512

      34a12b3b0d7d5a2fbee89f995fa5eced1c2d1a1f6dca5fea004d0abc07a898ed736e5d9bd76b5cb5a56d0899b9b60e6196684531e5a8192f739f735b5a40cfd5

    • SSDEEP

      384:8MCnsnTaIwsGkZKN274B0GBd+h5cBHrdwQm8Vmr6JgGlzDpH7uNj1JAT:EnsnqsLy0GBd+h5cBBwQxVk6JgGlzDph

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks