General

  • Target

    704-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • Sample

    241214-eyj7lstmbz

  • MD5

    98350ec7c8210bfa16ade81a286aa83d

  • SHA1

    5918713498897a4a5ea7687f5faac37b75345042

  • SHA256

    ebc6b33245d3b6e3c8b016cd5348436c6c1a534a4243c87d5a953e886909219b

  • SHA512

    88c474563e777672ff683523d0f22c226cf1ec417de32e40a49986f6aa56a2efa3e20e2d6ab22aeef0fe118e3534b9eb2e7ed15baf5cdf75054bd57c3deb4ba5

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8oN:RowpuQyNSG2eRa1styK9flTQPHo

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      704-1-0x00008000-0x00026464-memory.dmp

    • Size

      76KB

    • MD5

      98350ec7c8210bfa16ade81a286aa83d

    • SHA1

      5918713498897a4a5ea7687f5faac37b75345042

    • SHA256

      ebc6b33245d3b6e3c8b016cd5348436c6c1a534a4243c87d5a953e886909219b

    • SHA512

      88c474563e777672ff683523d0f22c226cf1ec417de32e40a49986f6aa56a2efa3e20e2d6ab22aeef0fe118e3534b9eb2e7ed15baf5cdf75054bd57c3deb4ba5

    • SSDEEP

      1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8oN:RowpuQyNSG2eRa1styK9flTQPHo

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks