General

  • Target

    5.175.249.223-boatnet.x86_64-2025-02-07T185131.elf

  • Size

    25KB

  • Sample

    250207-yxsbdaxjfm

  • MD5

    76844ef2be3da70137c8ed7d5c0706ba

  • SHA1

    6d94f01ba9ce2b260f09358dbbc10852635c7461

  • SHA256

    86b64dd06545a9c280c70e79305f8a044f836f0b37458fcfbf400fd835cd2abe

  • SHA512

    b1ac8b1f6bcf82c24cbecbaa32acfc21cb01d04759b154f980937b3f9dc979ada1da93986eb54804fe92be8566d5ce99062d9f7e300e334fea8d8d2fd58d746c

  • SSDEEP

    768:fVVhKh+3d5fe3DhgLi/9ib4Ce1rx2Yxr2/rsjl:P4OvfeTh9NxWAjl

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      5.175.249.223-boatnet.x86_64-2025-02-07T185131.elf

    • Size

      25KB

    • MD5

      76844ef2be3da70137c8ed7d5c0706ba

    • SHA1

      6d94f01ba9ce2b260f09358dbbc10852635c7461

    • SHA256

      86b64dd06545a9c280c70e79305f8a044f836f0b37458fcfbf400fd835cd2abe

    • SHA512

      b1ac8b1f6bcf82c24cbecbaa32acfc21cb01d04759b154f980937b3f9dc979ada1da93986eb54804fe92be8566d5ce99062d9f7e300e334fea8d8d2fd58d746c

    • SSDEEP

      768:fVVhKh+3d5fe3DhgLi/9ib4Ce1rx2Yxr2/rsjl:P4OvfeTh9NxWAjl

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks