General

  • Target

    boatnet.mips.elf

  • Size

    23KB

  • Sample

    250218-hx987azlz3

  • MD5

    cee6585e60fc85044c942cc41fc69eec

  • SHA1

    b2901dc34ac518fe5430af9ce827022846b95577

  • SHA256

    0445d12106a314074d4b96870742787452528196da68b67def54cc1d97a228cb

  • SHA512

    dc9d804e7dd048ba5305ba10758093f63fab453bac41b5a331ec157309c4e6feb8018f1fa82ad4f5167a3cc8063de3548b0e39c53802ab9aaf0325e82fc84cb8

  • SSDEEP

    384:deD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui4Kmd7JgGlzDpH7uNj1JAp:deD8ZSWvZHZbs1row697qohQvg9di7JX

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      23KB

    • MD5

      cee6585e60fc85044c942cc41fc69eec

    • SHA1

      b2901dc34ac518fe5430af9ce827022846b95577

    • SHA256

      0445d12106a314074d4b96870742787452528196da68b67def54cc1d97a228cb

    • SHA512

      dc9d804e7dd048ba5305ba10758093f63fab453bac41b5a331ec157309c4e6feb8018f1fa82ad4f5167a3cc8063de3548b0e39c53802ab9aaf0325e82fc84cb8

    • SSDEEP

      384:deD8ZSH2LLZUYyGZbsOiTrowSN9rnZMINlphQ/HYtui4Kmd7JgGlzDpH7uNj1JAp:deD8ZSWvZHZbs1row697qohQvg9di7JX

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks