General

  • Target

    194.85.251.9-boatnet.mpsl-2025-02-09T152009.elf

  • Size

    32KB

  • Sample

    250209-tajy9svrhk

  • MD5

    5853d1281f6048710900d852fbb84e3b

  • SHA1

    5377ff05f744000d22b4903c586a20f7c98abe86

  • SHA256

    f0e511aa426921edd11a2b44d9c255984de3ed90e2680154de9831717b1c5ef8

  • SHA512

    d2c7b94734f1c1c39316ea9087fbbbfad802a118bd82a106a6de3d1dded75b63e4e005813f4c5c173015e7eabfc680cf988566b55367e36a103beae2f6389519

  • SSDEEP

    768:tI8rE/hON9MkI4bOEl5AUxzcZbFRiPA7KFjDv88Wno:DgONKktbNl5xl4FRiPAGFjao

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      194.85.251.9-boatnet.mpsl-2025-02-09T152009.elf

    • Size

      32KB

    • MD5

      5853d1281f6048710900d852fbb84e3b

    • SHA1

      5377ff05f744000d22b4903c586a20f7c98abe86

    • SHA256

      f0e511aa426921edd11a2b44d9c255984de3ed90e2680154de9831717b1c5ef8

    • SHA512

      d2c7b94734f1c1c39316ea9087fbbbfad802a118bd82a106a6de3d1dded75b63e4e005813f4c5c173015e7eabfc680cf988566b55367e36a103beae2f6389519

    • SSDEEP

      768:tI8rE/hON9MkI4bOEl5AUxzcZbFRiPA7KFjDv88Wno:DgONKktbNl5xl4FRiPAGFjao

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks