General

  • Target

    744-1-0x00400000-0x0045af60-memory.dmp

  • Size

    98KB

  • Sample

    241226-z6yp7a1kdj

  • MD5

    14c52dbc2b69824a2bec10c34cfe9abf

  • SHA1

    97c4cde15f0ed9738afa67553ae4f7a3ee8f2ca7

  • SHA256

    1f03da0c9414dcb8c35d6500c40f3eb962c1b877b5b5da2e7faeac21bc1e29de

  • SHA512

    2f7b496e2081c7b1239180f9bf1debb7bf8b24c089ce15a28dd0c4663caee124eb0e38f0d396bbb0379acd2b51487221d9f69b317eda2d6738451280ea86006d

  • SSDEEP

    1536:0xODm3pPRWNqq28QDSfIMFQfgAZ+0u8vZjemPT9ESKhC7q0rU:00DOpPRWu8ERZ+0u8vjhhq0rU

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      744-1-0x00400000-0x0045af60-memory.dmp

    • Size

      98KB

    • MD5

      14c52dbc2b69824a2bec10c34cfe9abf

    • SHA1

      97c4cde15f0ed9738afa67553ae4f7a3ee8f2ca7

    • SHA256

      1f03da0c9414dcb8c35d6500c40f3eb962c1b877b5b5da2e7faeac21bc1e29de

    • SHA512

      2f7b496e2081c7b1239180f9bf1debb7bf8b24c089ce15a28dd0c4663caee124eb0e38f0d396bbb0379acd2b51487221d9f69b317eda2d6738451280ea86006d

    • SSDEEP

      1536:0xODm3pPRWNqq28QDSfIMFQfgAZ+0u8vZjemPT9ESKhC7q0rU:00DOpPRWu8ERZ+0u8vjhhq0rU

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks