General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250203-hgfpmstlc1

  • MD5

    32c3a0df9ddb689b7a730138e5648cf6

  • SHA1

    6dcd37ad227afe9f39a87c9ec57ae798ab28207c

  • SHA256

    93632ef3f491998b2f3badfc895adf8fa1392b7ea3d815f8693b26cbebc2703d

  • SHA512

    8e036ad0e564766eb7b68b074fdb3936220231e9bac23402549376d1e26dddb394cc2a3572d2da158ad97c5bbfeea80f38d6f1fe088855daaa9dd378d01b658f

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiOPmdtJgGlzDpH7uNj1JAy:YeD8ZSWvZHZbs1row697qohQvg9eitJU

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      32c3a0df9ddb689b7a730138e5648cf6

    • SHA1

      6dcd37ad227afe9f39a87c9ec57ae798ab28207c

    • SHA256

      93632ef3f491998b2f3badfc895adf8fa1392b7ea3d815f8693b26cbebc2703d

    • SHA512

      8e036ad0e564766eb7b68b074fdb3936220231e9bac23402549376d1e26dddb394cc2a3572d2da158ad97c5bbfeea80f38d6f1fe088855daaa9dd378d01b658f

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiOPmdtJgGlzDpH7uNj1JAy:YeD8ZSWvZHZbs1row697qohQvg9eitJU

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks