General

  • Target

    742-1-0x00400000-0x0043affc-memory.dmp

  • Size

    169KB

  • Sample

    241226-12v9yaspgp

  • MD5

    b15304ca486489051e88a3c800956594

  • SHA1

    69e938f6e4629caec4e8ae0b6f6badec54d2d713

  • SHA256

    d7ba157ca8ebd8a86a1b236acdfc5a5636fe315a454bd5708913bd6c7c2614ff

  • SHA512

    0de82c01f2007a9f178599773658bb178d4596d715e19af413d59406c3bdd64680a816417c8a927a5edb502ec4189f61bf251706a288f3132616d2740da7a210

  • SSDEEP

    1536:LIb5UayVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq09rM:LIxyP3R5fMOAa3zx158BM

Malware Config

Targets

    • Target

      742-1-0x00400000-0x0043affc-memory.dmp

    • Size

      169KB

    • MD5

      b15304ca486489051e88a3c800956594

    • SHA1

      69e938f6e4629caec4e8ae0b6f6badec54d2d713

    • SHA256

      d7ba157ca8ebd8a86a1b236acdfc5a5636fe315a454bd5708913bd6c7c2614ff

    • SHA512

      0de82c01f2007a9f178599773658bb178d4596d715e19af413d59406c3bdd64680a816417c8a927a5edb502ec4189f61bf251706a288f3132616d2740da7a210

    • SSDEEP

      1536:LIb5UayVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq09rM:LIxyP3R5fMOAa3zx158BM

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks