General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250121-2w8thsvpe1

  • MD5

    6129406e9850f4a48530d466de6e75ae

  • SHA1

    6000be0b30970409430d0ecb621acd0ce8aa572e

  • SHA256

    6f5a89242933f926a750c594edbf4eedffc049a21ec42684dfe138d4ebbf0b3d

  • SHA512

    515cfb99905ccdf47ea5ed2059c1ff9689522ca5e076238c0d77e2e948aac4e0bfa181462970ec069acfb808ca3b82c5c4c46ec5bf5d73514511b4303740e02d

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpXcZqSWvC:4QlS07FUXqIYSXQKqu0qq

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      6129406e9850f4a48530d466de6e75ae

    • SHA1

      6000be0b30970409430d0ecb621acd0ce8aa572e

    • SHA256

      6f5a89242933f926a750c594edbf4eedffc049a21ec42684dfe138d4ebbf0b3d

    • SHA512

      515cfb99905ccdf47ea5ed2059c1ff9689522ca5e076238c0d77e2e948aac4e0bfa181462970ec069acfb808ca3b82c5c4c46ec5bf5d73514511b4303740e02d

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpXcZqSWvC:4QlS07FUXqIYSXQKqu0qq

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks