General

  • Target

    boatnet.mips.elf

  • Size

    24KB

  • Sample

    250330-v1n7cas1dy

  • MD5

    c42a37ebb69b83ad1098e5960dd4c409

  • SHA1

    1f0a05b3468f3ed0bcd6077c0fab76e64d3b0273

  • SHA256

    77080b0504d8f2ac811cb0df0aaa1105439bdb82038b3c2659353d10e92450ac

  • SHA512

    c9b845f0397058090cc0418fa82e91604dd372b46c888c2112f306e21aba695eb80ad75a7f7506a1adc8bbe73599339c492b03ecc8eac735b154bba2fe3c10f6

  • SSDEEP

    384:cFULndjFCbhnsk/jCUhn5niq5HG50EgG6Na6CrBN+j3ur88XproQZG2eJgGlzDpp:cynd8VLhGq5HM/Vb4D//2eJgGlzDpbuW

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      24KB

    • MD5

      c42a37ebb69b83ad1098e5960dd4c409

    • SHA1

      1f0a05b3468f3ed0bcd6077c0fab76e64d3b0273

    • SHA256

      77080b0504d8f2ac811cb0df0aaa1105439bdb82038b3c2659353d10e92450ac

    • SHA512

      c9b845f0397058090cc0418fa82e91604dd372b46c888c2112f306e21aba695eb80ad75a7f7506a1adc8bbe73599339c492b03ecc8eac735b154bba2fe3c10f6

    • SSDEEP

      384:cFULndjFCbhnsk/jCUhn5niq5HG50EgG6Na6CrBN+j3ur88XproQZG2eJgGlzDpp:cynd8VLhGq5HM/Vb4D//2eJgGlzDpbuW

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks