General

  • Target

    boatnet.mpsl.elf

  • Size

    32KB

  • Sample

    250113-w4f6ksvlfj

  • MD5

    4a761b842678d8a3c4c242bde5ecfc18

  • SHA1

    daf456aed4ab71caea3ebdd99eaa24a27fc5174e

  • SHA256

    5e113a4c8333f8521c7fa2b8a2eb107c1c8d068af3b8dbafc34f7d3ad622960d

  • SHA512

    d1a59b1d045a0e84ee27e4b4d9d8a4ae73be8fd6637559cbe16bf79eabfbfa5194332bd48b633a41e80e652d2dc8ade84aba01a4a03007236bd3ded382e39d66

  • SSDEEP

    768:cI8rE/hON9MkI4bOEl5AUxzcZbFRiPA7KFjDv8gdDWn4:QgONKktbNl5xl4FRiPAGFjDY4

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      32KB

    • MD5

      4a761b842678d8a3c4c242bde5ecfc18

    • SHA1

      daf456aed4ab71caea3ebdd99eaa24a27fc5174e

    • SHA256

      5e113a4c8333f8521c7fa2b8a2eb107c1c8d068af3b8dbafc34f7d3ad622960d

    • SHA512

      d1a59b1d045a0e84ee27e4b4d9d8a4ae73be8fd6637559cbe16bf79eabfbfa5194332bd48b633a41e80e652d2dc8ade84aba01a4a03007236bd3ded382e39d66

    • SSDEEP

      768:cI8rE/hON9MkI4bOEl5AUxzcZbFRiPA7KFjDv8gdDWn4:QgONKktbNl5xl4FRiPAGFjDY4

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks