General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    241228-zyay6asje1

  • MD5

    2603361b94514242aa12297aa16d8dbd

  • SHA1

    b2d52dfe242b3d0f9427e5354ccab7dfcaf0d321

  • SHA256

    cf4c6564566eddb7a9bd66d94aca00eb80502d4e58d9cad50f6ade33e463aa23

  • SHA512

    b810d07158d300055df202000e585216a379a5630a8f0fe0daad4a8a640743bf505349b0fd2a8df11641c2964ccfbfa482c42661c1a30cecb18afb4c5ca9b551

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBprZqSWvB:4QlS07FUXqIYSXQKqutqJ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      2603361b94514242aa12297aa16d8dbd

    • SHA1

      b2d52dfe242b3d0f9427e5354ccab7dfcaf0d321

    • SHA256

      cf4c6564566eddb7a9bd66d94aca00eb80502d4e58d9cad50f6ade33e463aa23

    • SHA512

      b810d07158d300055df202000e585216a379a5630a8f0fe0daad4a8a640743bf505349b0fd2a8df11641c2964ccfbfa482c42661c1a30cecb18afb4c5ca9b551

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBprZqSWvB:4QlS07FUXqIYSXQKqutqJ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks