General

  • Target

    boatnet.mpsl.elf

  • Size

    31KB

  • Sample

    241231-xzcg9svmav

  • MD5

    24b656189880536f62fef672d91c041c

  • SHA1

    49fd8752d5a8be165d5213962d562da066ce2377

  • SHA256

    3f646028d8fc7b19fbf83bbe7d7fc6692ec17b5df4969362efa88463bbde742c

  • SHA512

    9e378b070c201e5ffc2be283d3d9ec1e01227cb87d017041ee37faaae3c5846b76459d173697deef6dbc373e3c822e11fb7241fef0700a31ce5d2cb4f4fe69a3

  • SSDEEP

    768:UuVPVnXG0h+OtnkkvQHkI6gL608EBQavzv6KPcQwo3qaPSpOTkiCOW/:UuVRrJQZV81a/PcQB3twOoi2

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      31KB

    • MD5

      24b656189880536f62fef672d91c041c

    • SHA1

      49fd8752d5a8be165d5213962d562da066ce2377

    • SHA256

      3f646028d8fc7b19fbf83bbe7d7fc6692ec17b5df4969362efa88463bbde742c

    • SHA512

      9e378b070c201e5ffc2be283d3d9ec1e01227cb87d017041ee37faaae3c5846b76459d173697deef6dbc373e3c822e11fb7241fef0700a31ce5d2cb4f4fe69a3

    • SSDEEP

      768:UuVPVnXG0h+OtnkkvQHkI6gL608EBQavzv6KPcQwo3qaPSpOTkiCOW/:UuVRrJQZV81a/PcQB3twOoi2

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks