General

  • Target

    boatnet.mpsl.elf

  • Size

    25KB

  • Sample

    250330-vnl68asyet

  • MD5

    ab1568d1e4c50584a82bd7e7020ddbd7

  • SHA1

    2afa6e3b5f554686d21438c9c6602069e456c925

  • SHA256

    5e705a0bde7fe41541d4c5c5a4737467728bf2b2701fb726c2563a50f0e9519c

  • SHA512

    eb6642dff606f66648d1162d8487b655a70474147ae311076fd616f885576e28f2ff23abce7ed35ccdf7c91c4223e4f0cc87c61f8448eea57d143a0cb2858a12

  • SSDEEP

    384:8zg2hWInrW7lkQ7S8cV4NjQOPmeKHLTIjo5Wb1HmG4iqu7yYY4ObstSxu4RWGVCZ:8xWIrilk2SkPoLFqHmGg0yYY4Oo0uYWt

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      25KB

    • MD5

      ab1568d1e4c50584a82bd7e7020ddbd7

    • SHA1

      2afa6e3b5f554686d21438c9c6602069e456c925

    • SHA256

      5e705a0bde7fe41541d4c5c5a4737467728bf2b2701fb726c2563a50f0e9519c

    • SHA512

      eb6642dff606f66648d1162d8487b655a70474147ae311076fd616f885576e28f2ff23abce7ed35ccdf7c91c4223e4f0cc87c61f8448eea57d143a0cb2858a12

    • SSDEEP

      384:8zg2hWInrW7lkQ7S8cV4NjQOPmeKHLTIjo5Wb1HmG4iqu7yYY4ObstSxu4RWGVCZ:8xWIrilk2SkPoLFqHmGg0yYY4Oo0uYWt

    • Mirai

      Mirai is a prevalent Linux malware infecting exposed network devices.

    • Mirai family

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks