General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250210-hw4p1stmep

  • MD5

    577b08adaa10b631a66d4deee7807a28

  • SHA1

    3c30c2f0791a0b514cecd35949824371f88e2662

  • SHA256

    ec7be2ef4a91f93cc68537bb6fb866574ba2c2d6c66eb2f3c7cbd107bc520193

  • SHA512

    35e0b71bb23b9436d10400685e884cb29518dd3e71bd3ea725428cb612a1df7c64531267616bcdb3fc6d0621265a699dc0a76484df30d6e6237dfe30e4819104

  • SSDEEP

    384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiBmdtJgGlzDpH7uNj1JA4F:YeD8ZSWvZHZbs1row697qohQvg9BitJi

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      577b08adaa10b631a66d4deee7807a28

    • SHA1

      3c30c2f0791a0b514cecd35949824371f88e2662

    • SHA256

      ec7be2ef4a91f93cc68537bb6fb866574ba2c2d6c66eb2f3c7cbd107bc520193

    • SHA512

      35e0b71bb23b9436d10400685e884cb29518dd3e71bd3ea725428cb612a1df7c64531267616bcdb3fc6d0621265a699dc0a76484df30d6e6237dfe30e4819104

    • SSDEEP

      384:YeD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtuiBmdtJgGlzDpH7uNj1JA4F:YeD8ZSWvZHZbs1row697qohQvg9BitJi

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks