General

  • Target

    boatnet.mips.elf

  • Size

    31KB

  • Sample

    250209-ttwr6swmhr

  • MD5

    e26c06fcc3b3e46040e49ac9c0b68928

  • SHA1

    2a631555a166c51b94f898506385fe3648eb14e5

  • SHA256

    5232159e652b1445635ef83fb65f61290a253dd7184d329619998c10e0e9b744

  • SHA512

    443ee05d75e7c4151b0e9f88e604118e160b440b3be7353243bdb2e499c745aa42378769d3de3517fa09672eeef1d35669d0ae78abedcb8f12f65ae011d824e6

  • SSDEEP

    768:3LHAmM1r8iRvylPd2Ww+9r8qG5Wu92uVbaMP6aJJgGlzDpbuR1JH:3q3Kv2oD4Ww28aA7VJuF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      31KB

    • MD5

      e26c06fcc3b3e46040e49ac9c0b68928

    • SHA1

      2a631555a166c51b94f898506385fe3648eb14e5

    • SHA256

      5232159e652b1445635ef83fb65f61290a253dd7184d329619998c10e0e9b744

    • SHA512

      443ee05d75e7c4151b0e9f88e604118e160b440b3be7353243bdb2e499c745aa42378769d3de3517fa09672eeef1d35669d0ae78abedcb8f12f65ae011d824e6

    • SSDEEP

      768:3LHAmM1r8iRvylPd2Ww+9r8qG5Wu92uVbaMP6aJJgGlzDpbuR1JH:3q3Kv2oD4Ww28aA7VJuF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks