General

  • Target

    743-1-0x00400000-0x0043affc-memory.dmp

  • Size

    169KB

  • Sample

    241209-s92spaspgw

  • MD5

    ec14e0fae63d029895ae5b2a7de1c176

  • SHA1

    916795e776633214c4b5e66d09cd44b55b05a1df

  • SHA256

    1f5a15edb0067b74a6cd55c3eec98ff878e5e9e4edea531f2058ff7a62017197

  • SHA512

    db76b157c754507482d0076b43d74f55ad18f3a493a93f17f58595408b15647af292be0626efee7f9aac0f9db5f19ec185513c4d6af3e9053f1c08278bf8d04f

  • SSDEEP

    1536:LIb5UayVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq0orM:LIxyP3R5fMOAa3zx158QM

Malware Config

Targets

    • Target

      743-1-0x00400000-0x0043affc-memory.dmp

    • Size

      169KB

    • MD5

      ec14e0fae63d029895ae5b2a7de1c176

    • SHA1

      916795e776633214c4b5e66d09cd44b55b05a1df

    • SHA256

      1f5a15edb0067b74a6cd55c3eec98ff878e5e9e4edea531f2058ff7a62017197

    • SHA512

      db76b157c754507482d0076b43d74f55ad18f3a493a93f17f58595408b15647af292be0626efee7f9aac0f9db5f19ec185513c4d6af3e9053f1c08278bf8d04f

    • SSDEEP

      1536:LIb5UayVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq0orM:LIxyP3R5fMOAa3zx158QM

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks