General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250214-3wtv2a1qcs

  • MD5

    0e98145713a5a57d2adbb867ec79ac3a

  • SHA1

    d5d71576c1c78b6fbb6e5a8b3471aea2c589cb85

  • SHA256

    9cb67cd55f71325e81cbcb0d1c285d683b578ff206fd8293cf69185d93e69e07

  • SHA512

    146be3fdeb4ba666ccd6685b1c616286f8bb1609a1932e79bafdf9bf7f3c5b2f43c35de8010b552b2c47e98e727b55910f3860e00e84eb8b940c7b662d293d1a

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpAZqEWvg:/QlS07FUXqIYSXQKquYqa

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      0e98145713a5a57d2adbb867ec79ac3a

    • SHA1

      d5d71576c1c78b6fbb6e5a8b3471aea2c589cb85

    • SHA256

      9cb67cd55f71325e81cbcb0d1c285d683b578ff206fd8293cf69185d93e69e07

    • SHA512

      146be3fdeb4ba666ccd6685b1c616286f8bb1609a1932e79bafdf9bf7f3c5b2f43c35de8010b552b2c47e98e727b55910f3860e00e84eb8b940c7b662d293d1a

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBpAZqEWvg:/QlS07FUXqIYSXQKquYqa

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks