General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    241209-f79z3aznat

  • MD5

    bd88c4a5c3c04ddbe937b2e21c00d50b

  • SHA1

    a53daa166178ee7cae9db14607c3f0a7aba5eb08

  • SHA256

    d035d610233daf959c1768ed935b3d265648e31d356ee20604e8cbb69c0ab82d

  • SHA512

    999113fd3163e450f43f20f71e3ab50536fa09dcef0f9ab93c74b1c38f6d28d25b6033740845e6a421e5300c2dc2885d32185b34f14ed8436bd4b965fc29416d

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp5ZqSWvj:4QlS07FUXqIYSXQKquvqb

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      bd88c4a5c3c04ddbe937b2e21c00d50b

    • SHA1

      a53daa166178ee7cae9db14607c3f0a7aba5eb08

    • SHA256

      d035d610233daf959c1768ed935b3d265648e31d356ee20604e8cbb69c0ab82d

    • SHA512

      999113fd3163e450f43f20f71e3ab50536fa09dcef0f9ab93c74b1c38f6d28d25b6033740845e6a421e5300c2dc2885d32185b34f14ed8436bd4b965fc29416d

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBp5ZqSWvj:4QlS07FUXqIYSXQKquvqb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks