General

  • Target

    boatnet.mpsl.elf

  • Size

    27KB

  • Sample

    241220-13xjdswkdq

  • MD5

    1566b362392e3648bf33187e76d70557

  • SHA1

    2e919bfd68354a7ea4836b3aacb5ea3624d6b90b

  • SHA256

    373c0a6f95a4081254d502fcd7eb746bd0532fde1edca5637ceb3b5e0a0785c4

  • SHA512

    cf7e685324775e66f31ef5a3aff770e4baa922ca0b5b1068c23356eeb157e695b693d926915699d700ef9e62aaed571b61cb46739df46729e338de8a37b56e69

  • SSDEEP

    384:ANpTqrBMyz2ZpRcZbsZGBdHIwFrs1PY1a910Jxc5s3ArKKLYF14Bo0MgvbIRWGVm:ANFqrG9zcZe2HI0rA/9Gxd/14fhoWF

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      27KB

    • MD5

      1566b362392e3648bf33187e76d70557

    • SHA1

      2e919bfd68354a7ea4836b3aacb5ea3624d6b90b

    • SHA256

      373c0a6f95a4081254d502fcd7eb746bd0532fde1edca5637ceb3b5e0a0785c4

    • SHA512

      cf7e685324775e66f31ef5a3aff770e4baa922ca0b5b1068c23356eeb157e695b693d926915699d700ef9e62aaed571b61cb46739df46729e338de8a37b56e69

    • SSDEEP

      384:ANpTqrBMyz2ZpRcZbsZGBdHIwFrs1PY1a910Jxc5s3ArKKLYF14Bo0MgvbIRWGVm:ANFqrG9zcZe2HI0rA/9Gxd/14fhoWF

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks