General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250131-ewcdzszqgj

  • MD5

    73b4d0b21995eabda85b7b3c8fab7d42

  • SHA1

    35aca73e53b574d2cc37b1cf9777582ae9eda029

  • SHA256

    7b577a85097b5c0d98539d8267cc0fd7c9c0e9f6f5068ef9fcccb1a526e1c903

  • SHA512

    f780d74c581e47a73a39cbe3461e1569e5da26b1400fc39f35682a2550d32d5f44e087eefefd9b32af42d125a2b7634cf973d50597121495acbd0121df46bd75

  • SSDEEP

    384:mpv/m5ymlxf8WATyVBkFC0qM9ZkJ75wQGmTJrbfVp9Y3kGMrD+drRWGVCz0Nvbym:mRENluWAX5qM9OJ6UNfVnY3D6+HWQ

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      73b4d0b21995eabda85b7b3c8fab7d42

    • SHA1

      35aca73e53b574d2cc37b1cf9777582ae9eda029

    • SHA256

      7b577a85097b5c0d98539d8267cc0fd7c9c0e9f6f5068ef9fcccb1a526e1c903

    • SHA512

      f780d74c581e47a73a39cbe3461e1569e5da26b1400fc39f35682a2550d32d5f44e087eefefd9b32af42d125a2b7634cf973d50597121495acbd0121df46bd75

    • SSDEEP

      384:mpv/m5ymlxf8WATyVBkFC0qM9ZkJ75wQGmTJrbfVp9Y3kGMrD+drRWGVCz0Nvbym:mRENluWAX5qM9OJ6UNfVnY3D6+HWQ

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks