General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    241215-y5jzzawjd1

  • MD5

    a9f689bf8cf76ae8d59d62857f4d57b3

  • SHA1

    d8da88846597f2fc8223f957833dc52f4b711680

  • SHA256

    b36d96ad6ec160fb45c62a233a80305bf36489b2091508e37773acf162521c68

  • SHA512

    f5d59a07d4e71f6f47fa9a3db2ad4d852fa9bce22f00f81ceb573a23f42e6f550415b7fa7845695f1e0f066d4afe328bb882a9356c80ded90c5d0261e3f5d7f6

  • SSDEEP

    768:otrQlS07dEv0UXqUhvQE+CXecI1+leF85gR7XZqqWvE:iQlS07FUXqIYSXU1wwpqU

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      a9f689bf8cf76ae8d59d62857f4d57b3

    • SHA1

      d8da88846597f2fc8223f957833dc52f4b711680

    • SHA256

      b36d96ad6ec160fb45c62a233a80305bf36489b2091508e37773acf162521c68

    • SHA512

      f5d59a07d4e71f6f47fa9a3db2ad4d852fa9bce22f00f81ceb573a23f42e6f550415b7fa7845695f1e0f066d4afe328bb882a9356c80ded90c5d0261e3f5d7f6

    • SSDEEP

      768:otrQlS07dEv0UXqUhvQE+CXecI1+leF85gR7XZqqWvE:iQlS07FUXqIYSXU1wwpqU

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks