General

  • Target

    709-1-0x00400000-0x00451a58-memory.dmp

  • Size

    69KB

  • Sample

    241214-eytq2svqck

  • MD5

    7e9849ca382c2f45e952f5c232d0d80d

  • SHA1

    8010468541dadd420e7e35dc37efbce347c363e3

  • SHA256

    a113c2daf3539bbd3817bfeef1bf481be8cd88ea01b197e3c93931f7506ce230

  • SHA512

    4dc0593d3dd4679d30e255daa83f9db32a072e77212474c46b9d56ae5437f83264b8a8fab153699c13e6e22937ed93aedb130302fb298437bb983848a880a7f3

  • SSDEEP

    768:kZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatA2:BnN4ZH2SyOyuIq8LMEIUq+cvtpvXzfLe

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      709-1-0x00400000-0x00451a58-memory.dmp

    • Size

      69KB

    • MD5

      7e9849ca382c2f45e952f5c232d0d80d

    • SHA1

      8010468541dadd420e7e35dc37efbce347c363e3

    • SHA256

      a113c2daf3539bbd3817bfeef1bf481be8cd88ea01b197e3c93931f7506ce230

    • SHA512

      4dc0593d3dd4679d30e255daa83f9db32a072e77212474c46b9d56ae5437f83264b8a8fab153699c13e6e22937ed93aedb130302fb298437bb983848a880a7f3

    • SSDEEP

      768:kZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatA2:BnN4ZH2SyOyuIq8LMEIUq+cvtpvXzfLe

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks