Analysis
- max time kernel
34s - max time network
33s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
- submitted
08/08/2026, 17:17
General
- Target boatnet.mpsl
- Size 217KB
- Sample260808-vts7qaap4s
- SHA256 1def37df3c90cb6b4aadb5fe92bff6a5b4894abe2c193052ddf38acaa215bf36
Score
10/10
Malware Config
Signatures
- Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
- Deletes Audit logs 1 TTPs 1 IoCs
Deletes logs related to the Linux Audit framework.
- Deletes journal logs 1 TTPs 1 IoCs
Deletes systemd journal logs. Likely to evade detection.
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Modifies systemd 2 TTPs 1 IoCs
Adds/ modifies systemd service files. Likely to achieve persistence.
- Write file to user bin folder 1 IoCs
- Writes file to system bin folder 2 IoCs
Processes
-
/tmp/boatnet.mpsl/tmp/boatnet.mpsl1⤵
- Deletes Audit logs
- Deletes journal logs
- Modifies Watchdog functionality
- Modifies systemd
- Write file to user bin folder
- Writes file to system bin folder
-
/bin/shsh -c "systemctl enable infinitech >/dev/null 2>&1"2⤵
-
-
/bin/shsh -c "systemctl start infinitech >/dev/null 2>&1"2⤵
-
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Privilege Escalation
Boot or Logon Autostart Execution
1XDG Autostart Entries
1Create or Modify System Process
1Systemd Service
1Replay Monitor
Loading Replay Monitor...
Downloads
infinitech.service
infinitd