General

  • Target

    boatnet.mpsl.elf

  • Size

    74KB

  • Sample

    250331-j9mjbsv1dt

  • MD5

    b7aa2943a2bc3a7997fe2f8df17790f4

  • SHA1

    6efa138657b59ff373a9b931878014b51262ffc0

  • SHA256

    87438f4bc39c237f8d4faaee7e7111e29aba788a9eb40dbfa69cdbc1764cb95c

  • SHA512

    6d0c3ae1bc553bf9644587497ed2ae6d653e312f08a4296124be5643c6cbc60ec9643ee65261e034d35b67bed7c2de41007a43add8b7bf87801058bd0dfec052

  • SSDEEP

    1536:XSjzWd0EBWBmIoBuoubAVLJEX+ZqgR2E:XSjzWd1BWBmIoB/oX+R

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      boatnet.mpsl.elf

    • Size

      74KB

    • MD5

      b7aa2943a2bc3a7997fe2f8df17790f4

    • SHA1

      6efa138657b59ff373a9b931878014b51262ffc0

    • SHA256

      87438f4bc39c237f8d4faaee7e7111e29aba788a9eb40dbfa69cdbc1764cb95c

    • SHA512

      6d0c3ae1bc553bf9644587497ed2ae6d653e312f08a4296124be5643c6cbc60ec9643ee65261e034d35b67bed7c2de41007a43add8b7bf87801058bd0dfec052

    • SSDEEP

      1536:XSjzWd0EBWBmIoBuoubAVLJEX+ZqgR2E:XSjzWd1BWBmIoB/oX+R

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks