General

  • Target

    176.65.134.111-boatnet.x86-2025-01-31T195809.elf

  • Size

    20KB

  • Sample

    250131-y6x8zswmcs

  • MD5

    8aa70f8604a3953246208c29980c4817

  • SHA1

    10bb00a499547c86cf4b8b9682fd8f34ebebb0bf

  • SHA256

    34e80c9f2284311172aaa3f8204de2ac54b2440a6a27fa2b35ddd87f1f2f8587

  • SHA512

    dee108d1f6c105494930ca0f5654e7704dccaca4caf3e663d55bdb16d6a3fc884aaa634ddb980b8ca67a80f3e74fac6765f8ded3a72708ac559a86bc598d1ccf

  • SSDEEP

    384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+Zk99BzCFTOd68NSG9tcSPcYsPikHL2Au:k98o08kxofBE+Zk9ToaNl8k+a6RQ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      176.65.134.111-boatnet.x86-2025-01-31T195809.elf

    • Size

      20KB

    • MD5

      8aa70f8604a3953246208c29980c4817

    • SHA1

      10bb00a499547c86cf4b8b9682fd8f34ebebb0bf

    • SHA256

      34e80c9f2284311172aaa3f8204de2ac54b2440a6a27fa2b35ddd87f1f2f8587

    • SHA512

      dee108d1f6c105494930ca0f5654e7704dccaca4caf3e663d55bdb16d6a3fc884aaa634ddb980b8ca67a80f3e74fac6765f8ded3a72708ac559a86bc598d1ccf

    • SSDEEP

      384:M0sLpj8s/qPui8uZxoIA57RWQjJiEVi+Zk99BzCFTOd68NSG9tcSPcYsPikHL2Au:k98o08kxofBE+Zk9ToaNl8k+a6RQ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks