General

  • Target

    boatnet.mpsl.elf

  • Size

    24KB

  • Sample

    250218-gbrz2sxpen

  • MD5

    d1773f70195419399bcdc1eb6a11a4da

  • SHA1

    90c6b141319a62821f88562f23d2a09ff94f3930

  • SHA256

    4ad92443477cc1d67f4327ea1260730825b4ffb947ce75682f263f0c45a472a4

  • SHA512

    f41820c7f5949016bb7235fa25368d9b9ff904800406131edd0d9a0d9c4743e074cfcd977bce6b23e901d276aefb5389f2c8fbcc1e1f10d1b3c63d7a6af31b3d

  • SSDEEP

    768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBp3KZqEWvS:/QlS07FUXqIYSXQKqu3+qg

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      24KB

    • MD5

      d1773f70195419399bcdc1eb6a11a4da

    • SHA1

      90c6b141319a62821f88562f23d2a09ff94f3930

    • SHA256

      4ad92443477cc1d67f4327ea1260730825b4ffb947ce75682f263f0c45a472a4

    • SHA512

      f41820c7f5949016bb7235fa25368d9b9ff904800406131edd0d9a0d9c4743e074cfcd977bce6b23e901d276aefb5389f2c8fbcc1e1f10d1b3c63d7a6af31b3d

    • SSDEEP

      768:oCrQlS07dEv0UXqUhvQE+CXQKMQKCXBp3KZqEWvS:/QlS07FUXqIYSXQKqu3+qg

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks