General

  • Target

    5.83.218.12-boatnet.x86-2025-02-14T101214.elf

  • Size

    20KB

  • Sample

    250214-nxbzaavqhs

  • MD5

    4c7e5a276d05a56d969d07c3e66d5859

  • SHA1

    c99979681704901a11d7d048fb401625056c902a

  • SHA256

    3054b4c6085fba89718bd771dd182a818e94d7365809dff5f801f224dc4b2df4

  • SHA512

    85b557b18f819db08722a36f6627ebcd485c12e35aef7ef2bd10b873bdde01ef7a7fcf77686180d3b81e89b071cbf11d4f8adfe0f01912a545e01ffe0314fc01

  • SSDEEP

    384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+Zk7az1Hb+502F2vwA9B1fKVVXT3Sy9:x98o08kxofBE+Zk7aVbp2F2n8VVXZ9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      5.83.218.12-boatnet.x86-2025-02-14T101214.elf

    • Size

      20KB

    • MD5

      4c7e5a276d05a56d969d07c3e66d5859

    • SHA1

      c99979681704901a11d7d048fb401625056c902a

    • SHA256

      3054b4c6085fba89718bd771dd182a818e94d7365809dff5f801f224dc4b2df4

    • SHA512

      85b557b18f819db08722a36f6627ebcd485c12e35aef7ef2bd10b873bdde01ef7a7fcf77686180d3b81e89b071cbf11d4f8adfe0f01912a545e01ffe0314fc01

    • SSDEEP

      384:M0DLpj8s/qPui8uZxoIA57RWQjJiEVi+Zk7az1Hb+502F2vwA9B1fKVVXT3Sy9:x98o08kxofBE+Zk7aVbp2F2n8VVXZ9

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks