General

  • Target

    355-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • Sample

    230922-hj6zlsgb56

  • MD5

    42cc662d0579d2a01ffced8f09e472e2

  • SHA1

    258ee5d46344d88b0633113b71e6ef42ed7b3225

  • SHA256

    30ed961e6a887468d12d3b14a6f0446afe58bf39df79a658e242bdfc527fd99e

  • SHA512

    29f7b4ea8f283e92e016d093ed5aa73487967da3fed41eb0446a1d679a3c16e214637e0980f2dd137a1316a75a1da60e53dbba1bff237b9b698b479e97aa2ed6

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8or:RowpuQyNSG2eRa1styK9flTQPHo

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      355-1-0x00008000-0x00026464-memory.dmp

    • Size

      76KB

    • MD5

      42cc662d0579d2a01ffced8f09e472e2

    • SHA1

      258ee5d46344d88b0633113b71e6ef42ed7b3225

    • SHA256

      30ed961e6a887468d12d3b14a6f0446afe58bf39df79a658e242bdfc527fd99e

    • SHA512

      29f7b4ea8f283e92e016d093ed5aa73487967da3fed41eb0446a1d679a3c16e214637e0980f2dd137a1316a75a1da60e53dbba1bff237b9b698b479e97aa2ed6

    • SSDEEP

      1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8or:RowpuQyNSG2eRa1styK9flTQPHo

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks