General

  • Target

    boatnet.x86.elf

  • Size

    20KB

  • Sample

    250211-xwpcnayjgt

  • MD5

    7e29b4ee778321251b9dc2491c0e2074

  • SHA1

    e91f0b22d144c48e05c74be3c8fca8621a8b1718

  • SHA256

    b0b4ca0000bf0d9c0d05b1ca0369dad3db6da085b04852ec8195d723531df5d0

  • SHA512

    db17142d4f2cfe6bc47e78912cdf16a4b7e4fe57c50d3a694e47bf098d332acf17f4db1fb23bdccc259e2acdb8b9236b6983bddeca6e25bef6d4c8f6437fba23

  • SSDEEP

    384:MzLp4JY8IN33qYN+OsLYhx0kHpFqy2iublAUo3lSy/:iedINH3N+9LYT0h7AUU/

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.x86.elf

    • Size

      20KB

    • MD5

      7e29b4ee778321251b9dc2491c0e2074

    • SHA1

      e91f0b22d144c48e05c74be3c8fca8621a8b1718

    • SHA256

      b0b4ca0000bf0d9c0d05b1ca0369dad3db6da085b04852ec8195d723531df5d0

    • SHA512

      db17142d4f2cfe6bc47e78912cdf16a4b7e4fe57c50d3a694e47bf098d332acf17f4db1fb23bdccc259e2acdb8b9236b6983bddeca6e25bef6d4c8f6437fba23

    • SSDEEP

      384:MzLp4JY8IN33qYN+OsLYhx0kHpFqy2iublAUo3lSy/:iedINH3N+9LYT0h7AUU/

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks