General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    250211-kst3hs1rbx

  • MD5

    e6ec5482793871b90e10f1baaf84de2f

  • SHA1

    606ee7020d76fb0a9d68aa50fc168e6b133a7778

  • SHA256

    36b6badad6a809b5bb413670a757c7d81e97396c7dd28f2ed9ad3975b5eec81f

  • SHA512

    17ebaa62f3a35f819ad9f6fd121eb8275c8ab91611190d061c49f9241ee69f38c95669f28227f8b5f6019bc41071f83bf4022a8c110bea4eae8d0f6a3e803219

  • SSDEEP

    768:KNdOIOETeUOte2bjz2WkLmcQJGssf3NPQ9q3UEL/wwJ+7U5Pju3CPoFzpe:K/5OyQeKjziLmcQJm3vLH+skrc

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      e6ec5482793871b90e10f1baaf84de2f

    • SHA1

      606ee7020d76fb0a9d68aa50fc168e6b133a7778

    • SHA256

      36b6badad6a809b5bb413670a757c7d81e97396c7dd28f2ed9ad3975b5eec81f

    • SHA512

      17ebaa62f3a35f819ad9f6fd121eb8275c8ab91611190d061c49f9241ee69f38c95669f28227f8b5f6019bc41071f83bf4022a8c110bea4eae8d0f6a3e803219

    • SSDEEP

      768:KNdOIOETeUOte2bjz2WkLmcQJGssf3NPQ9q3UEL/wwJ+7U5Pju3CPoFzpe:K/5OyQeKjziLmcQJm3vLH+skrc

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks