General

  • Target

    boatnet.mpsl.elf

  • Size

    27KB

  • Sample

    241101-nz99vs1bkm

  • MD5

    35400e9ec135ca7fcdbd254a673c8fc6

  • SHA1

    fc356599b40b2d94e1b9e4aa391572e163c69d9d

  • SHA256

    39b4443f914dcc252830b7b8bb0d9e122da2034e72d6934b0e265850b4a15d24

  • SHA512

    732dcb5ca6332069142a7f0eab0aa1708a12b20721c01a25d30a4963730aa4a833988e4ea7f94630ef5d669afd408362d47a920a6e74a8279f967999d0dec5ea

  • SSDEEP

    768:VBKqSsOWs+jpaYNQdhOO8cXeuvOVd4ukkTwWnA:/nzteGHcVOV5FA

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      27KB

    • MD5

      35400e9ec135ca7fcdbd254a673c8fc6

    • SHA1

      fc356599b40b2d94e1b9e4aa391572e163c69d9d

    • SHA256

      39b4443f914dcc252830b7b8bb0d9e122da2034e72d6934b0e265850b4a15d24

    • SHA512

      732dcb5ca6332069142a7f0eab0aa1708a12b20721c01a25d30a4963730aa4a833988e4ea7f94630ef5d669afd408362d47a920a6e74a8279f967999d0dec5ea

    • SSDEEP

      768:VBKqSsOWs+jpaYNQdhOO8cXeuvOVd4ukkTwWnA:/nzteGHcVOV5FA

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks