General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250203-k3cwzsynan

  • MD5

    3c1892147711786a4301a1f65bca1062

  • SHA1

    db7fb2485b00a7909a8f7c27f9fbeeaf23cf071f

  • SHA256

    cc171cd20865fde2c59da291f9502cb9f3da3b499d7887ca3432c8af43591215

  • SHA512

    797bb3f053e6a6f679d9b9ea605cf84b092670d0a529723e9061b0a3c06dec41bfa38e4e848f408c111b2f1ac57d8fa01434defbf685f7ae94d7fd832b98eb1a

  • SSDEEP

    768:x1aiWLv7IDgooHFKXiPoe7MVMjGjq9KIZWghT:fcvcDgooHwS9GM3

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      3c1892147711786a4301a1f65bca1062

    • SHA1

      db7fb2485b00a7909a8f7c27f9fbeeaf23cf071f

    • SHA256

      cc171cd20865fde2c59da291f9502cb9f3da3b499d7887ca3432c8af43591215

    • SHA512

      797bb3f053e6a6f679d9b9ea605cf84b092670d0a529723e9061b0a3c06dec41bfa38e4e848f408c111b2f1ac57d8fa01434defbf685f7ae94d7fd832b98eb1a

    • SSDEEP

      768:x1aiWLv7IDgooHFKXiPoe7MVMjGjq9KIZWghT:fcvcDgooHwS9GM3

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks