General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250125-s8rw4azjc1

  • MD5

    7f60eb1455dff80437e42c93e7247476

  • SHA1

    167fea94fd667b037aa28068645c7be85b690bab

  • SHA256

    150a3de84d8410a60b2c6367f89e80dc37d4d3fbbafc4bb7c49755703e748de6

  • SHA512

    d76292c00ddb0ffef9a4f6c480342b8d3845736d49f441422d884027f399879698e1c43371cf91f6860c53b67f18668c04b800324d5c3a8bbea46244af8a2df0

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpJZqSWvT:4QlS07FUXqIYSXQKqufqL

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      7f60eb1455dff80437e42c93e7247476

    • SHA1

      167fea94fd667b037aa28068645c7be85b690bab

    • SHA256

      150a3de84d8410a60b2c6367f89e80dc37d4d3fbbafc4bb7c49755703e748de6

    • SHA512

      d76292c00ddb0ffef9a4f6c480342b8d3845736d49f441422d884027f399879698e1c43371cf91f6860c53b67f18668c04b800324d5c3a8bbea46244af8a2df0

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpJZqSWvT:4QlS07FUXqIYSXQKqufqL

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks