General

  • Target

    boatnet.mips.elf

  • Size

    71KB

  • Sample

    250331-j9mjbsyjz3

  • MD5

    8055bae4e3da1e7729f294ed576ae156

  • SHA1

    6de9d9320a0e71f4c4203566af82394fc29042ce

  • SHA256

    9ad9065bb0f84b6db12336f50ce0211eb98a81a6f3f0fa8a34353da75bf4114d

  • SHA512

    a94ce38d40f818202d6c735046aba6b4759e78398d583aadfdeb440aadc23e137fb86f194445883e250e4f5daae601fd03d73d6a208b2e2c54b68773ea7f34ee

  • SSDEEP

    768:4Ln8MlrkH/rkHWnm7IenkW/w5sWv5OtMgqYKHF5sSI8MloRALw5GhdrsLwJGg8+P:4fCwIwtyopSiEALMhwJGga1MdmI9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mips.elf

    • Size

      71KB

    • MD5

      8055bae4e3da1e7729f294ed576ae156

    • SHA1

      6de9d9320a0e71f4c4203566af82394fc29042ce

    • SHA256

      9ad9065bb0f84b6db12336f50ce0211eb98a81a6f3f0fa8a34353da75bf4114d

    • SHA512

      a94ce38d40f818202d6c735046aba6b4759e78398d583aadfdeb440aadc23e137fb86f194445883e250e4f5daae601fd03d73d6a208b2e2c54b68773ea7f34ee

    • SSDEEP

      768:4Ln8MlrkH/rkHWnm7IenkW/w5sWv5OtMgqYKHF5sSI8MloRALw5GhdrsLwJGg8+P:4fCwIwtyopSiEALMhwJGga1MdmI9

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks