General

  • Target
    boatnet.mips.elf
  • Size 70KB
  • Sample261006-b13vysybld
  • SHA256 836779b889eb95b448d74c2704f05bddcb7e621dc3a6a45cafe2634f9ba6def7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • mirai

Botnet
  • LZRD

C2
  • 176.65.139.206

Targets

    • Target
      boatnet.mips.elf
    • Size 70KB
    • SHA256 836779b889eb95b448d74c2704f05bddcb7e621dc3a6a45cafe2634f9ba6def7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v16

Tasks