General

  • Target

    boatnet.mips.elf

  • Size

    36KB

  • Sample

    250207-3ws9hatqhv

  • MD5

    62550341a2c0e44a4749a812d009189d

  • SHA1

    f7401a72cacdaa9095e2f62344a12588d756d48d

  • SHA256

    bd7c1b1c9ab9ed66264bd4e4d888a8166bd7ce3a9431e4f203c003685d068187

  • SHA512

    b7e92646ea4245029f6f21cfd95d75c8fa7003c69ecb9e45a3d9e3e0a993e3d996e041b23404505071b8193758f8cb3d4475e59c42393f011f327528a7f7bdf8

  • SSDEEP

    768:n0fSmam6Bnjsx3ajvw/kl9O/NrARrQSJ4R2X5vSJgGlzDpbuR1J/iElRs0eyP:Vm4VW49OVUVKSWVJu1i90ey

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      36KB

    • MD5

      62550341a2c0e44a4749a812d009189d

    • SHA1

      f7401a72cacdaa9095e2f62344a12588d756d48d

    • SHA256

      bd7c1b1c9ab9ed66264bd4e4d888a8166bd7ce3a9431e4f203c003685d068187

    • SHA512

      b7e92646ea4245029f6f21cfd95d75c8fa7003c69ecb9e45a3d9e3e0a993e3d996e041b23404505071b8193758f8cb3d4475e59c42393f011f327528a7f7bdf8

    • SSDEEP

      768:n0fSmam6Bnjsx3ajvw/kl9O/NrARrQSJ4R2X5vSJgGlzDpbuR1J/iElRs0eyP:Vm4VW49OVUVKSWVJu1i90ey

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks