General

  • Target

    94.103.6.45-boatnet.arm7-2025-02-09T232203.elf

  • Size

    45KB

  • Sample

    250209-3rva1awmbp

  • MD5

    d60e991b1849aa59ad95f629fb5180be

  • SHA1

    1872313d659eb178afaa97c1845917cbf32be4cb

  • SHA256

    728e537e9ee08a87085c1e3a0c3c120401c1e0ea32990225abf7aa5d1a92b421

  • SHA512

    05364eacd3c37b43434fc9cb34eab33a3f73305cd4dce62458d51a7c53ce9a1b3675e518b5fe7bf20d37e475f11f503594ff2f8ea346da1ebe6f744ac9a7b222

  • SSDEEP

    768:gW2myW5zrY3m+KDOtELVpuyUEQNIM4ZktwkVlXFbkdzx39q3UELMIk9r/e/lQMqa:f7d5zrY3mVqtSEyUE0IM4Fk7FbkdzgLd

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      94.103.6.45-boatnet.arm7-2025-02-09T232203.elf

    • Size

      45KB

    • MD5

      d60e991b1849aa59ad95f629fb5180be

    • SHA1

      1872313d659eb178afaa97c1845917cbf32be4cb

    • SHA256

      728e537e9ee08a87085c1e3a0c3c120401c1e0ea32990225abf7aa5d1a92b421

    • SHA512

      05364eacd3c37b43434fc9cb34eab33a3f73305cd4dce62458d51a7c53ce9a1b3675e518b5fe7bf20d37e475f11f503594ff2f8ea346da1ebe6f744ac9a7b222

    • SSDEEP

      768:gW2myW5zrY3m+KDOtELVpuyUEQNIM4ZktwkVlXFbkdzx39q3UELMIk9r/e/lQMqa:f7d5zrY3mVqtSEyUE0IM4Fk7FbkdzgLd

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks