General

  • Target

    boatnet.mpsl.elf

  • Size

    37KB

  • Sample

    250207-3zzwfsvrfk

  • MD5

    2a79fb575ba62d87b5e932518b143a35

  • SHA1

    f6161a3365df363d43a5c3b7c3ea0edde5742a2c

  • SHA256

    0f5fe81b0939fbac844d8a1e5066280ffece6e46947710ff769f47a15764cba6

  • SHA512

    e65962196b73ba8ec2d949d6d44724665638d5caade6844923ba163d5a566326de3cb6289cd3c97d543e9d3a1b2468da40c7516d08dec612cf55b6da45b54a8f

  • SSDEEP

    768:2tB5dgXnbH/WqSA+v1uvDvfiORrHEJEQpW3F/fW:2RdGbHlT+NijfiwHxNF/e

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      37KB

    • MD5

      2a79fb575ba62d87b5e932518b143a35

    • SHA1

      f6161a3365df363d43a5c3b7c3ea0edde5742a2c

    • SHA256

      0f5fe81b0939fbac844d8a1e5066280ffece6e46947710ff769f47a15764cba6

    • SHA512

      e65962196b73ba8ec2d949d6d44724665638d5caade6844923ba163d5a566326de3cb6289cd3c97d543e9d3a1b2468da40c7516d08dec612cf55b6da45b54a8f

    • SSDEEP

      768:2tB5dgXnbH/WqSA+v1uvDvfiORrHEJEQpW3F/fW:2RdGbHlT+NijfiwHxNF/e

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks