General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250117-j3valaynhq

  • MD5

    0c8f988478256717823576916c25704c

  • SHA1

    e84545e213fdc5ee64a30cee5f677a477935ce65

  • SHA256

    4f6c096d10f629735f48a93dd50583efb707e79d7155cb4df53e7f4c75048a8e

  • SHA512

    f700d7182a0ce21b20fb0d4abcd3b0eaaaf5a1aecfd930d16f50d03bba4b8926d2102ca4fa238493c1cecc3a117da3af0b0cb2e0309e59b8d2277b9ab0bcf2b0

  • SSDEEP

    768:c4rQlS07dEv0UXqUhvQE+CXQKMQKCXBp5VZq8Wv4:BQlS07FUXqIYSXQKquZqO

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      0c8f988478256717823576916c25704c

    • SHA1

      e84545e213fdc5ee64a30cee5f677a477935ce65

    • SHA256

      4f6c096d10f629735f48a93dd50583efb707e79d7155cb4df53e7f4c75048a8e

    • SHA512

      f700d7182a0ce21b20fb0d4abcd3b0eaaaf5a1aecfd930d16f50d03bba4b8926d2102ca4fa238493c1cecc3a117da3af0b0cb2e0309e59b8d2277b9ab0bcf2b0

    • SSDEEP

      768:c4rQlS07dEv0UXqUhvQE+CXQKMQKCXBp5VZq8Wv4:BQlS07FUXqIYSXQKquZqO

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks