General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    250203-hgfdwavqdq

  • MD5

    5e36c339a599116b0729e8cb030728a8

  • SHA1

    7449c89cde70e13878fded3a3cfdcc30d5079bac

  • SHA256

    acd996e81a14dbf34e3656c6f8cc1ae548eaf659e6247296c7bae7ed3edeb093

  • SHA512

    ed722447e2cfb1c7012f5a25e3173d22e513f4e8777d052e9eb437de23ca41b965ceb8ccd92bf53c35bbb6dd4138e57cf2d3862065ba26838cb90cf1f6091b09

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b3a9q3UELbUXfi6nVMQHI4vcGpvQ:DECFd+A6YHAxPLRQZQ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      5e36c339a599116b0729e8cb030728a8

    • SHA1

      7449c89cde70e13878fded3a3cfdcc30d5079bac

    • SHA256

      acd996e81a14dbf34e3656c6f8cc1ae548eaf659e6247296c7bae7ed3edeb093

    • SHA512

      ed722447e2cfb1c7012f5a25e3173d22e513f4e8777d052e9eb437de23ca41b965ceb8ccd92bf53c35bbb6dd4138e57cf2d3862065ba26838cb90cf1f6091b09

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b3a9q3UELbUXfi6nVMQHI4vcGpvQ:DECFd+A6YHAxPLRQZQ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks