General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    241205-jjncyavmas

  • MD5

    6697d5a9e5a5e17a8506ca234ad44325

  • SHA1

    d9d8604c69a30fdc1682aee9c607035f42b2824e

  • SHA256

    53d423157cc99ea1cf510ed6f17f6ce3a57de49b01e4d77b8dc3610689c95019

  • SHA512

    b951e1938bdeac39c5e6027f12d6d65468937517bd59a252a6cb9fb321ca7711808185fbe7b16221b68db25df8021a5727b8a25ebc213cf79d871ae1e0d1a56b

  • SSDEEP

    384:C3CS77CNGEXilbe1aAYd1Xw7slMevVrodG0pAjmI05RWifqPjxRWGVCz0NvGUs:C3CS77CNzSk1aPg7Fe2LH/5YXjPWgs

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      6697d5a9e5a5e17a8506ca234ad44325

    • SHA1

      d9d8604c69a30fdc1682aee9c607035f42b2824e

    • SHA256

      53d423157cc99ea1cf510ed6f17f6ce3a57de49b01e4d77b8dc3610689c95019

    • SHA512

      b951e1938bdeac39c5e6027f12d6d65468937517bd59a252a6cb9fb321ca7711808185fbe7b16221b68db25df8021a5727b8a25ebc213cf79d871ae1e0d1a56b

    • SSDEEP

      384:C3CS77CNGEXilbe1aAYd1Xw7slMevVrodG0pAjmI05RWifqPjxRWGVCz0NvGUs:C3CS77CNzSk1aPg7Fe2LH/5YXjPWgs

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks