Analysis
-
max time kernel
124s -
max time network
148s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
resource tags
arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
01-05-2023 11:51
General
-
Target
boatnet.mpsl.elf
-
Size
24KB
-
MD5
b4431e6f613276927197ad11f19d057a
-
SHA1
77d15358656f27bb5d721e30142f11b8b083124c
-
SHA256
9c60c5537651b08560ae5c742e69f4c8460c9741ccef5862a98befcffd68cec4
-
SHA512
9de7396adc47f86fc0d9f0ceb9387676556997c48043419daa22eeb6cccb5d5201fe04801d8316c9ee232bce677438415e154d237cd263b7f23233a4efe38b63
-
SSDEEP
768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpUZqEWvM:/QlS07FUXqIYSXQKqusqO
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
Processes:
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/326-1-0x00400000-0x00452a58-memory.dmp