General
- Target boatnet.mpsl
- Size 217KB
- Sample260808-vts7qaap4s
- SHA256 1def37df3c90cb6b4aadb5fe92bff6a5b4894abe2c193052ddf38acaa215bf36
Score
10/10
Malware Config
Targets
-
- Target boatnet.mpsl
- Size 217KB
- SHA256 1def37df3c90cb6b4aadb5fe92bff6a5b4894abe2c193052ddf38acaa215bf36
Score10/10-
Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Deletes Audit logs
Deletes logs related to the Linux Audit framework.
-
Deletes journal logs
Deletes systemd journal logs. Likely to evade detection.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
-
Write file to user bin folder
-
Writes file to system bin folder
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1