General

  • Target

    134.255.232.87-boatnet.mpsl-2025-02-01T231133.elf

  • Size

    24KB

  • Sample

    250201-3ab34avmav

  • MD5

    63e9dcc03a836ad6f9afe8c5e1547675

  • SHA1

    6e098122a7b56eb03051a8c5acc57fb15a41dd8c

  • SHA256

    e1f9b280ae3747ee4ed93e54942cc25513727b3c0f1b9e3c797de9bcdfff0c97

  • SHA512

    8008fb9e71a089d6a84dd9d64c4515baf0bea1d5099e1e45aa65bd97c95d6f3a47417160596016dfbc1b0b3c78c09d2bd85675bc0b1f0096729add31a07cfddd

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpnZqEWvF:/QlS07FUXqIYSXQKquZqr

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      134.255.232.87-boatnet.mpsl-2025-02-01T231133.elf

    • Size

      24KB

    • MD5

      63e9dcc03a836ad6f9afe8c5e1547675

    • SHA1

      6e098122a7b56eb03051a8c5acc57fb15a41dd8c

    • SHA256

      e1f9b280ae3747ee4ed93e54942cc25513727b3c0f1b9e3c797de9bcdfff0c97

    • SHA512

      8008fb9e71a089d6a84dd9d64c4515baf0bea1d5099e1e45aa65bd97c95d6f3a47417160596016dfbc1b0b3c78c09d2bd85675bc0b1f0096729add31a07cfddd

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpnZqEWvF:/QlS07FUXqIYSXQKquZqr

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks