General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    241101-ev5ddawhld

  • MD5

    b9cc02e838477394a884d1b7b7eaf11b

  • SHA1

    229e51ec1d147736d767df8eebacf1ac8a3543c4

  • SHA256

    02c4b08540bca557428f80a8e381863cffc5abcc751d462dab4e6e55e659e7e1

  • SHA512

    e28467e1a27210e182ec05c067278ee8ca7ee6afa2e1037033059713cad6d0322b671346611098c777e5d3072c260ccb3457adb47e61d8572bd91b6e6124f862

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpO5ZqSWv2:4QlS07FUXqIYSXQKquOvq+

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      b9cc02e838477394a884d1b7b7eaf11b

    • SHA1

      229e51ec1d147736d767df8eebacf1ac8a3543c4

    • SHA256

      02c4b08540bca557428f80a8e381863cffc5abcc751d462dab4e6e55e659e7e1

    • SHA512

      e28467e1a27210e182ec05c067278ee8ca7ee6afa2e1037033059713cad6d0322b671346611098c777e5d3072c260ccb3457adb47e61d8572bd91b6e6124f862

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpO5ZqSWv2:4QlS07FUXqIYSXQKquOvq+

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks