General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250209-1kewmatmfj

  • MD5

    60ed4eb1e100e00e9f16911351245a90

  • SHA1

    4540795b6d6217d4bb09b0724927e308bc172b87

  • SHA256

    b152712f22bb8a16e06f5712444aa7072c91187e3390d378efc396e1e7475ba5

  • SHA512

    33e7ad92c651ef226f3eaa4b2b74d77a46aba377d3526962fd0535e294811bf34ce836db3d69181d002d805fedd887fdf086a81c04f97c995cd2c4e12203c52a

  • SSDEEP

    768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpgZqSWvD:4QlS07FUXqIYSXQKqu4qb

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      60ed4eb1e100e00e9f16911351245a90

    • SHA1

      4540795b6d6217d4bb09b0724927e308bc172b87

    • SHA256

      b152712f22bb8a16e06f5712444aa7072c91187e3390d378efc396e1e7475ba5

    • SHA512

      33e7ad92c651ef226f3eaa4b2b74d77a46aba377d3526962fd0535e294811bf34ce836db3d69181d002d805fedd887fdf086a81c04f97c995cd2c4e12203c52a

    • SSDEEP

      768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpgZqSWvD:4QlS07FUXqIYSXQKqu4qb

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks