General

  • Target

    739-1-0x00400000-0x00452a58-memory.dmp

  • Size

    73KB

  • Sample

    241201-2exd6avncs

  • MD5

    77ef4419492d82912b367b2b69a2ed02

  • SHA1

    0a7ff3d59759a0dc74f7bb45334e31ff665e5239

  • SHA256

    1bd3550750e48034c353d62357403c05fe29275b68365a2d6c27aae40ab47237

  • SHA512

    4779468869c71aa74d5cb8fa9c0cd2c9bb34e30c273830a02517ba6ee58c7abb449437b5fea1e4ff18261086d86bab4554c875eba72d730b1827547de980249e

  • SSDEEP

    1536:oJPEBmW5iNWqcGTkwnXHZ84OqdZerEStgP:oJPEB8NWq9hqqd0C

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      739-1-0x00400000-0x00452a58-memory.dmp

    • Size

      73KB

    • MD5

      77ef4419492d82912b367b2b69a2ed02

    • SHA1

      0a7ff3d59759a0dc74f7bb45334e31ff665e5239

    • SHA256

      1bd3550750e48034c353d62357403c05fe29275b68365a2d6c27aae40ab47237

    • SHA512

      4779468869c71aa74d5cb8fa9c0cd2c9bb34e30c273830a02517ba6ee58c7abb449437b5fea1e4ff18261086d86bab4554c875eba72d730b1827547de980249e

    • SSDEEP

      1536:oJPEBmW5iNWqcGTkwnXHZ84OqdZerEStgP:oJPEB8NWq9hqqd0C

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks