General

  • Target

    boatnet.mpsl.elf

  • Size

    22KB

  • Sample

    250113-hxmswstrbp

  • MD5

    4246dcfcb0ad66051ea25f1347f2a390

  • SHA1

    394547a8a39124004c78c5c2908c2e24c9486813

  • SHA256

    f0a02eb9814340da1300a747efc9d501fb32ad2f7670898a65567fad01de7594

  • SHA512

    849b39b2eae1e9925de5dd65bdebacf36978f77315a4e8982ebe4686b38c5ec7a535aacd1dc0fec7f8d93555bcf4d761810f23176e3b955a445beef7cab74603

  • SSDEEP

    384:d4TWkApSTL0HY2AXGO/CdmZzTQZb4uapMnR9/p+sIeMOdSb6kjz7R+mzGRWGVCz7:KikApmL0xA9KdmdTQNG0FpKe7CttmWD

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      22KB

    • MD5

      4246dcfcb0ad66051ea25f1347f2a390

    • SHA1

      394547a8a39124004c78c5c2908c2e24c9486813

    • SHA256

      f0a02eb9814340da1300a747efc9d501fb32ad2f7670898a65567fad01de7594

    • SHA512

      849b39b2eae1e9925de5dd65bdebacf36978f77315a4e8982ebe4686b38c5ec7a535aacd1dc0fec7f8d93555bcf4d761810f23176e3b955a445beef7cab74603

    • SSDEEP

      384:d4TWkApSTL0HY2AXGO/CdmZzTQZb4uapMnR9/p+sIeMOdSb6kjz7R+mzGRWGVCz7:KikApmL0xA9KdmdTQNG0FpKe7CttmWD

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks