General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    241201-k17ctatlhq

  • MD5

    3789e91e9a9943af09d32931fa208275

  • SHA1

    0ae9329fd0ac11aa9b18b4719be90cfebab368c6

  • SHA256

    82bb9d666579e8a19de77a8b5c1788bcf6d1427e9cffd82354d8e67e8d6bdaf0

  • SHA512

    32ebaf14f5cce4da994695eb19fce68f6ad97e41bade5d960e45dd1e5f5b1db138fb70721e267ea40d8b5b36fcd711deb1736fbc3ee86154ee66b8afaf8fdfb2

  • SSDEEP

    768:cfrQlS07dEv0UXqUhvQE+CXfcsQdeSEXHrh2dZqCWv1:oQlS07FUXqIYSXqUSEF6q9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      3789e91e9a9943af09d32931fa208275

    • SHA1

      0ae9329fd0ac11aa9b18b4719be90cfebab368c6

    • SHA256

      82bb9d666579e8a19de77a8b5c1788bcf6d1427e9cffd82354d8e67e8d6bdaf0

    • SHA512

      32ebaf14f5cce4da994695eb19fce68f6ad97e41bade5d960e45dd1e5f5b1db138fb70721e267ea40d8b5b36fcd711deb1736fbc3ee86154ee66b8afaf8fdfb2

    • SSDEEP

      768:cfrQlS07dEv0UXqUhvQE+CXfcsQdeSEXHrh2dZqCWv1:oQlS07FUXqIYSXqUSEF6q9

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks