General

  • Target

    boatnet.mips.elf

  • Size

    30KB

  • Sample

    250130-vs5jcsxndw

  • MD5

    4c4020a9ab6aba67a628cbeb31b0af3a

  • SHA1

    55ceac92de276759af7f2e5d3827799a8819f687

  • SHA256

    2211135d60948b88524a9d37f12845dc9eeaa84eb0bb7c1df5f3e8184c408b53

  • SHA512

    10a7110a430c769598db741da2076e63f56b6de70f3bc8fd20c367f49e4b8533765c0b956f0971721bd0203628a82b7c1650d96bdae4a07c962c49d5f3e15a94

  • SSDEEP

    768:dXCGiKumo7KL8P6VWe1pidAWk/XTM/GPfT1GrMJgGlzDpbuR1JNd:dXCGi/r9UWkbM/GPfT1bVJuN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      30KB

    • MD5

      4c4020a9ab6aba67a628cbeb31b0af3a

    • SHA1

      55ceac92de276759af7f2e5d3827799a8819f687

    • SHA256

      2211135d60948b88524a9d37f12845dc9eeaa84eb0bb7c1df5f3e8184c408b53

    • SHA512

      10a7110a430c769598db741da2076e63f56b6de70f3bc8fd20c367f49e4b8533765c0b956f0971721bd0203628a82b7c1650d96bdae4a07c962c49d5f3e15a94

    • SSDEEP

      768:dXCGiKumo7KL8P6VWe1pidAWk/XTM/GPfT1GrMJgGlzDpbuR1JNd:dXCGi/r9UWkbM/GPfT1bVJuN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks