General

  • Target

    boatnet.mpsl.elf

  • Size

    31KB

  • Sample

    241231-pql2casqam

  • MD5

    1cfb41fc05e0d7317fd2e0ca3ca93c0c

  • SHA1

    1cdb4fbffd32f67cf2faa2939f1edc1dd3669641

  • SHA256

    64846f80faa3d27177d3b04be1d6e4cc947dbb6b25ea88c8df507b0eac3cd193

  • SHA512

    c88608e9210f40d3b505d69ba10af6c0bfc2a1b3809c3752354d280fe64b2f4d8955a117579d4a1f6534021ba194dd2696732020e0c4efe5916fc708fc20b3f3

  • SSDEEP

    768:s4yv/FASi9+lhPuoII3rLjWem2mPRgxj1Ps/iWM:spbi9TyrLjVmlg3Ps/c

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      31KB

    • MD5

      1cfb41fc05e0d7317fd2e0ca3ca93c0c

    • SHA1

      1cdb4fbffd32f67cf2faa2939f1edc1dd3669641

    • SHA256

      64846f80faa3d27177d3b04be1d6e4cc947dbb6b25ea88c8df507b0eac3cd193

    • SHA512

      c88608e9210f40d3b505d69ba10af6c0bfc2a1b3809c3752354d280fe64b2f4d8955a117579d4a1f6534021ba194dd2696732020e0c4efe5916fc708fc20b3f3

    • SSDEEP

      768:s4yv/FASi9+lhPuoII3rLjWem2mPRgxj1Ps/iWM:spbi9TyrLjVmlg3Ps/c

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks