General

  • Target

    boatnet.arm7.elf

  • Size

    45KB

  • Sample

    250218-hyajysylcr

  • MD5

    1fd3b03b498a9b858a17684dfac4d8b4

  • SHA1

    4c3bda67aa5326c14b2b3b5ab771bd0483ca09fd

  • SHA256

    bc815e3b91633b2d342f75776e6343db9ee0748e8e8a74b11df3c7b6c6b4547e

  • SHA512

    11dc17d91d5f4db799517e8d2cd9a2b8d6fed7456f02aa1b3781a1d8880e7c81bc153b5a4a0500b92fcdd6416be927388630f5aec30929ca2d64c5126aeb4310

  • SSDEEP

    768:D/TYCoIxdEk+AxoTZAZHFeq8b31M9q3UELbUXfi6nVMQHI4vcGpvr:DECFd+A6YHAx7LRQZr

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.arm7.elf

    • Size

      45KB

    • MD5

      1fd3b03b498a9b858a17684dfac4d8b4

    • SHA1

      4c3bda67aa5326c14b2b3b5ab771bd0483ca09fd

    • SHA256

      bc815e3b91633b2d342f75776e6343db9ee0748e8e8a74b11df3c7b6c6b4547e

    • SHA512

      11dc17d91d5f4db799517e8d2cd9a2b8d6fed7456f02aa1b3781a1d8880e7c81bc153b5a4a0500b92fcdd6416be927388630f5aec30929ca2d64c5126aeb4310

    • SSDEEP

      768:D/TYCoIxdEk+AxoTZAZHFeq8b31M9q3UELbUXfi6nVMQHI4vcGpvr:DECFd+A6YHAx7LRQZr

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks