General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250125-tdyltszlct

  • MD5

    a3150482007ef3f4948803962aaeae5c

  • SHA1

    9d213caf06bdb09f518ddf05fc5375de763a10fd

  • SHA256

    697730bed4e894e2e9d7264e5194517534b0c2b0c028f83cd36afecf55707336

  • SHA512

    2596cb864fab8c389d5e6883e127ef892f4e97b6eda4d8b6bc27ab8478377d11b58c2f740d75b83b835be14755c5290dcd09a2bb6f2b66b89a7e4fb6fec7abae

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpMZqEWv/:/QlS07FUXqIYSXQKqu0q9

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      a3150482007ef3f4948803962aaeae5c

    • SHA1

      9d213caf06bdb09f518ddf05fc5375de763a10fd

    • SHA256

      697730bed4e894e2e9d7264e5194517534b0c2b0c028f83cd36afecf55707336

    • SHA512

      2596cb864fab8c389d5e6883e127ef892f4e97b6eda4d8b6bc27ab8478377d11b58c2f740d75b83b835be14755c5290dcd09a2bb6f2b66b89a7e4fb6fec7abae

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpMZqEWv/:/QlS07FUXqIYSXQKqu0q9

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks