General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    241207-jvwhpayqdm

  • MD5

    263364237a10563310514e46a8364b34

  • SHA1

    c3873838cf59fe3a6beb1d2ea39bec643233e420

  • SHA256

    0596e695f6426a86ca4b37f02c5ecd77f907b164809f0f889e1b268aaf55dd11

  • SHA512

    545923bf4f2739f299b62abb7e47ecec9dd2a95c291e19bc9839490a00332860ab6c7841439626443592c26e404214f35dc10ec620a3e292d99ace21202e60e8

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpkZqSWvz:4QlS07FUXqIYSXQKqucqr

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      263364237a10563310514e46a8364b34

    • SHA1

      c3873838cf59fe3a6beb1d2ea39bec643233e420

    • SHA256

      0596e695f6426a86ca4b37f02c5ecd77f907b164809f0f889e1b268aaf55dd11

    • SHA512

      545923bf4f2739f299b62abb7e47ecec9dd2a95c291e19bc9839490a00332860ab6c7841439626443592c26e404214f35dc10ec620a3e292d99ace21202e60e8

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpkZqSWvz:4QlS07FUXqIYSXQKqucqr

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks