General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250203-ggv9natpdq

  • MD5

    3936d4846498ce97961c4dee8c27bdd9

  • SHA1

    d6a05526cd24bd3bbaa044e75e350df1f4c37e81

  • SHA256

    79ce6264c822296b3062a68656c04029b715cc1aebd18d01195c5e6f0c7441fe

  • SHA512

    526ff59dc2f3b783a009ad906fc12a79cc41932a95ac76ca8387137b5a408bc2659b664100330cc6dde265edcb6c0ee30a03f8c4fdedfef150a3cd4533d861a0

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpoZqSWv1:4QlS07FUXqIYSXQKquQqN

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      3936d4846498ce97961c4dee8c27bdd9

    • SHA1

      d6a05526cd24bd3bbaa044e75e350df1f4c37e81

    • SHA256

      79ce6264c822296b3062a68656c04029b715cc1aebd18d01195c5e6f0c7441fe

    • SHA512

      526ff59dc2f3b783a009ad906fc12a79cc41932a95ac76ca8387137b5a408bc2659b664100330cc6dde265edcb6c0ee30a03f8c4fdedfef150a3cd4533d861a0

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpoZqSWv1:4QlS07FUXqIYSXQKquQqN

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks