General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250211-jc2a8aznan

  • MD5

    e496c9e8d101d6d8d55c1ad5c19ac065

  • SHA1

    c1094cb34dd95be295657593f12e6a76c63bc8ee

  • SHA256

    00a0afede80a0e06e6ef045d7f588ba33c48e36ec50fa0e84ec391228b6e6201

  • SHA512

    639b11c0a98d7ad1ddaac1e5ffeb5b7581c52133f35e649f5be9e5a1a864fc44135fe58ab5d8243119ae81f90f2472eeb359b51106b1547a8b8aae5cb503c0a5

  • SSDEEP

    384:J7eHXcB7vvig7/0SJiZr4P+BzPszXOF0E9T//nXIvs6JValFJgGlzDpH7uNj1JiN:J7eivvnD0SJOr4WBozXOb9T//4swKJgw

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      e496c9e8d101d6d8d55c1ad5c19ac065

    • SHA1

      c1094cb34dd95be295657593f12e6a76c63bc8ee

    • SHA256

      00a0afede80a0e06e6ef045d7f588ba33c48e36ec50fa0e84ec391228b6e6201

    • SHA512

      639b11c0a98d7ad1ddaac1e5ffeb5b7581c52133f35e649f5be9e5a1a864fc44135fe58ab5d8243119ae81f90f2472eeb359b51106b1547a8b8aae5cb503c0a5

    • SSDEEP

      384:J7eHXcB7vvig7/0SJiZr4P+BzPszXOF0E9T//nXIvs6JValFJgGlzDpH7uNj1JiN:J7eivvnD0SJOr4WBozXOb9T//4swKJgw

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks