General

  • Target

    boatnet.mpsl.elf

  • Size

    28KB

  • Sample

    241218-wlb4xaxjf1

  • MD5

    ef10dc4a6fc9356e5acd9b99fec49998

  • SHA1

    1d51699f425ed8416d546d3c02721330fc5e0b56

  • SHA256

    a2a9e34a79104ae239a27d7162d4a98e638f7e212710e1038d372dffb85d6ba9

  • SHA512

    a5fd1c65a4812f6604b3c71330c28502ffaf16b56b5e3c0ce50731acd924ff9522a167d9cb4da5f2907fc8a0815a9d814bc08dc93ea2329671a30bcae467444b

  • SSDEEP

    384:aE/wPMcOSFRzDFp2aaUn8Rcf3ljpppSen3euOFXN8h6nR+eQ3diZFt9oQ4Ogv7Ro:Z/wPHFRBaU86tj4N78wnR83d5JDvlWF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      28KB

    • MD5

      ef10dc4a6fc9356e5acd9b99fec49998

    • SHA1

      1d51699f425ed8416d546d3c02721330fc5e0b56

    • SHA256

      a2a9e34a79104ae239a27d7162d4a98e638f7e212710e1038d372dffb85d6ba9

    • SHA512

      a5fd1c65a4812f6604b3c71330c28502ffaf16b56b5e3c0ce50731acd924ff9522a167d9cb4da5f2907fc8a0815a9d814bc08dc93ea2329671a30bcae467444b

    • SSDEEP

      384:aE/wPMcOSFRzDFp2aaUn8Rcf3ljpppSen3euOFXN8h6nR+eQ3diZFt9oQ4Ogv7Ro:Z/wPHFRBaU86tj4N78wnR83d5JDvlWF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks