General

  • Target

    boatnet.mpsl.elf

  • Size

    32KB

  • Sample

    250112-rxz8nawlgx

  • MD5

    4e23210e2603fe08846bf7eeebd8aab5

  • SHA1

    b6f6949d7c9da505946a90bbb8cca46a4c3efd53

  • SHA256

    cd510f2661e5d81afed3093967ef5c31f1a14967a0e88b2b005549695653eaaa

  • SHA512

    9f3d48b2744fa1d3b489fcec2d1dd2b1ecf74f3ae47d38cc0b424a10b20f69ce1c61809426f0f58068dcf902fcaeb815dee465b9b2c8512973d3e4cbbfe4a2d8

  • SSDEEP

    768:GiBo3YwNAQcN+vKVi7Wb5YAfSCu4vlwX/iyEo6pGeGvKxFWm:Gi0cN+iVi7USmvlwX/iyEmewm

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      32KB

    • MD5

      4e23210e2603fe08846bf7eeebd8aab5

    • SHA1

      b6f6949d7c9da505946a90bbb8cca46a4c3efd53

    • SHA256

      cd510f2661e5d81afed3093967ef5c31f1a14967a0e88b2b005549695653eaaa

    • SHA512

      9f3d48b2744fa1d3b489fcec2d1dd2b1ecf74f3ae47d38cc0b424a10b20f69ce1c61809426f0f58068dcf902fcaeb815dee465b9b2c8512973d3e4cbbfe4a2d8

    • SSDEEP

      768:GiBo3YwNAQcN+vKVi7Wb5YAfSCu4vlwX/iyEo6pGeGvKxFWm:Gi0cN+iVi7USmvlwX/iyEmewm

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks