General

  • Target

    boatnet.x86_64.elf

  • Size

    31KB

  • Sample

    250209-ttw3yawnal

  • MD5

    871f3ab6374ee73581b2b2332de89f08

  • SHA1

    77f1158636d31a2699b2d362f046151125f510d1

  • SHA256

    1b93e14636daeb455efa855f6540a53809bc196dc6c16cbd7078361c4eae1644

  • SHA512

    565aef1182e4aac4555ec1f245e7379c56a9328c42e02437738deb5f98e7e2d5d700d915f0caa1f37571805dfd1b8f4690cc3d2b390de7692ed2bf70bd12f4da

  • SSDEEP

    768:fA8sF/8edf6LruWkPKxbZ+KQt+FGX0/EW/WKdm35ix07y:Ijaedf6Hpbnm+FGE/EYWKdpOy

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86_64.elf

    • Size

      31KB

    • MD5

      871f3ab6374ee73581b2b2332de89f08

    • SHA1

      77f1158636d31a2699b2d362f046151125f510d1

    • SHA256

      1b93e14636daeb455efa855f6540a53809bc196dc6c16cbd7078361c4eae1644

    • SHA512

      565aef1182e4aac4555ec1f245e7379c56a9328c42e02437738deb5f98e7e2d5d700d915f0caa1f37571805dfd1b8f4690cc3d2b390de7692ed2bf70bd12f4da

    • SSDEEP

      768:fA8sF/8edf6LruWkPKxbZ+KQt+FGX0/EW/WKdm35ix07y:Ijaedf6Hpbnm+FGE/EYWKdpOy

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks