General

  • Target

    boatnet.mpsl.elf

  • Size

    31KB

  • Sample

    241226-rhtsbsxpaq

  • MD5

    aedc9c210e87deeaef52a380b6df1191

  • SHA1

    6013ec20eb8b3bf07abe67927407c53753c9a449

  • SHA256

    3a03c297cb70775c4ae35c0a19d2aa90df82e0722338a43df019b0fb7bbee2ad

  • SHA512

    e113971144578e9a9d5ed974ffa1d52b0debf462eb62db1a657f5c43b204d3bf960793e961b8168ee503c25c81eb8b97e510746326906096fc0194cd9513cae4

  • SSDEEP

    768:J4yv/FASi9+lhPuoII3rLjWem2mPRgxj14aCD/8Ws:Jpbi9TyrLjVmlg3a/y

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      31KB

    • MD5

      aedc9c210e87deeaef52a380b6df1191

    • SHA1

      6013ec20eb8b3bf07abe67927407c53753c9a449

    • SHA256

      3a03c297cb70775c4ae35c0a19d2aa90df82e0722338a43df019b0fb7bbee2ad

    • SHA512

      e113971144578e9a9d5ed974ffa1d52b0debf462eb62db1a657f5c43b204d3bf960793e961b8168ee503c25c81eb8b97e510746326906096fc0194cd9513cae4

    • SSDEEP

      768:J4yv/FASi9+lhPuoII3rLjWem2mPRgxj14aCD/8Ws:Jpbi9TyrLjVmlg3a/y

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks