General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    250131-za9gtawnds

  • MD5

    10d224fe7d5579ce9c4dc2a32553edf7

  • SHA1

    cd14818a597d9885d5018656715d451bcccbb10d

  • SHA256

    e255f8fc2d7dd9a15211d4ade0c698f46135a128555d336ce33c2a58562cb6d3

  • SHA512

    d513b3ed626e6fc5ecb95713ae9f01007dec83b49f65c7fc36869ac3dd7dee27ffe244f1b821e56abf4ce7462d8dc3231b93bfb8582771f81fcf715327907f79

  • SSDEEP

    768:MfeioeB5Xopda18yxgJiEDMae7M3vVX9q3UELUoWInT5QM0wg8RDCeiAG:MfVv9GJVDMaAMNmLDbT7g8RmdAG

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      10d224fe7d5579ce9c4dc2a32553edf7

    • SHA1

      cd14818a597d9885d5018656715d451bcccbb10d

    • SHA256

      e255f8fc2d7dd9a15211d4ade0c698f46135a128555d336ce33c2a58562cb6d3

    • SHA512

      d513b3ed626e6fc5ecb95713ae9f01007dec83b49f65c7fc36869ac3dd7dee27ffe244f1b821e56abf4ce7462d8dc3231b93bfb8582771f81fcf715327907f79

    • SSDEEP

      768:MfeioeB5Xopda18yxgJiEDMae7M3vVX9q3UELUoWInT5QM0wg8RDCeiAG:MfVv9GJVDMaAMNmLDbT7g8RmdAG

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks