General

  • Target

    boatnet.mpsl.elf

  • Size

    32KB

  • Sample

    241226-2w8thstqhj

  • MD5

    7b6a0d1494f6b4ba205b617ec1c0db92

  • SHA1

    a42097911d601007d6f984da9e4f27b8cd321890

  • SHA256

    ecce1fb884e0edac5dd3f3c0ca3d3a42ce8c552e5fce2235ac65ecf982c2826d

  • SHA512

    a1f21518dd961be8ed30ac7b4437dc6711c2c3f5bfc4678ec0515df7f7359e73f6adfa8d926cdbb6bd5d2a734cb42b7967fcc841975ad291ecdc7fe3d462015b

  • SSDEEP

    768:yTHURFhp2WO6F92V+NiH3LOYX+OzCW3mIWu:yT0RFj256buZX+YCW3z

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      32KB

    • MD5

      7b6a0d1494f6b4ba205b617ec1c0db92

    • SHA1

      a42097911d601007d6f984da9e4f27b8cd321890

    • SHA256

      ecce1fb884e0edac5dd3f3c0ca3d3a42ce8c552e5fce2235ac65ecf982c2826d

    • SHA512

      a1f21518dd961be8ed30ac7b4437dc6711c2c3f5bfc4678ec0515df7f7359e73f6adfa8d926cdbb6bd5d2a734cb42b7967fcc841975ad291ecdc7fe3d462015b

    • SSDEEP

      768:yTHURFhp2WO6F92V+NiH3LOYX+OzCW3mIWu:yT0RFj256buZX+YCW3z

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks