General

  • Target

    boooooos.mpsl.elf

  • Size

    27KB

  • Sample

    250117-ngjzysvnat

  • MD5

    6654d0d02d47ad59c8c309f4e8fa8c00

  • SHA1

    faff102d64629d975bb3616f187b2b20370a88ac

  • SHA256

    47cfda2f10f4e24e6ca03e5629a310ba7499a9f84017ab5b9f6bd31c9d4e67dc

  • SHA512

    bfb6f7f42f773564d344f131a30f4acac1591d5ff718909641cefb64e9677061eb38808c92a1b53dbba80c40b6c260fc5f30d4d9848c72a2ac9ec64e825b9264

  • SSDEEP

    768:TdOxD+u4YaxS6JllAAYzWojdHBJdIKMVW04TJZJ1WJq:TdOxE++SzBxH/dzMVWzTJZJH

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boooooos.mpsl.elf

    • Size

      27KB

    • MD5

      6654d0d02d47ad59c8c309f4e8fa8c00

    • SHA1

      faff102d64629d975bb3616f187b2b20370a88ac

    • SHA256

      47cfda2f10f4e24e6ca03e5629a310ba7499a9f84017ab5b9f6bd31c9d4e67dc

    • SHA512

      bfb6f7f42f773564d344f131a30f4acac1591d5ff718909641cefb64e9677061eb38808c92a1b53dbba80c40b6c260fc5f30d4d9848c72a2ac9ec64e825b9264

    • SSDEEP

      768:TdOxD+u4YaxS6JllAAYzWojdHBJdIKMVW04TJZJ1WJq:TdOxE++SzBxH/dzMVWzTJZJH

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks