General

  • Target

    724-1-0x00400000-0x00451a58-memory.dmp

  • Size

    69KB

  • Sample

    231119-jr1m8shb98

  • MD5

    5fd22931be7fd09a04873e25a44a8573

  • SHA1

    f95a49bab1c4a42494b710ddd241e54a1c1cd281

  • SHA256

    41fe2916ce2b5dfe725f44a8aff183b6a870e233477a9d4f139dacd2e03ffc13

  • SHA512

    94232eb8b808237a783f6a850f084f3c9bacc3dbb458b539ac4458746df2ebaac91a5e6bfa064df891c9d08e797ea4107a1dee8866bb71320c038bf1362f1150

  • SSDEEP

    768:kZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatAv:BnN4ZH2SyOyuIq8LMEIUq+cvtpvXzWLe

Score
10/10

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      724-1-0x00400000-0x00451a58-memory.dmp

    • Size

      69KB

    • MD5

      5fd22931be7fd09a04873e25a44a8573

    • SHA1

      f95a49bab1c4a42494b710ddd241e54a1c1cd281

    • SHA256

      41fe2916ce2b5dfe725f44a8aff183b6a870e233477a9d4f139dacd2e03ffc13

    • SHA512

      94232eb8b808237a783f6a850f084f3c9bacc3dbb458b539ac4458746df2ebaac91a5e6bfa064df891c9d08e797ea4107a1dee8866bb71320c038bf1362f1150

    • SSDEEP

      768:kZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatAv:BnN4ZH2SyOyuIq8LMEIUq+cvtpvXzWLe

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks