General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250109-y5jn7szmey

  • MD5

    1d9dc98703e076d1399e4fcbe53b7174

  • SHA1

    69621db0aaaf185700170311f70972a633ccd591

  • SHA256

    63e07fb3c7f08140901b1b8485fac33ce510f93547e4677fa8890596245e25b2

  • SHA512

    62faa5691fc29bf92411558aae5fd001142ad03fa49156418630103a108eba293760bab5c84f11db810942d5fa31a965d301e3eb8a942eb268ea19bfeb0185ed

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpPiZqSWvE:4QlS07FUXqIYSXQKqueqc

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      1d9dc98703e076d1399e4fcbe53b7174

    • SHA1

      69621db0aaaf185700170311f70972a633ccd591

    • SHA256

      63e07fb3c7f08140901b1b8485fac33ce510f93547e4677fa8890596245e25b2

    • SHA512

      62faa5691fc29bf92411558aae5fd001142ad03fa49156418630103a108eba293760bab5c84f11db810942d5fa31a965d301e3eb8a942eb268ea19bfeb0185ed

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpPiZqSWvE:4QlS07FUXqIYSXQKqueqc

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks