General

  • Target

    742-1-0x00400000-0x0043affc-memory.dmp

  • Size

    169KB

  • Sample

    241227-c62erazpcw

  • MD5

    9032d52e4ae97dec85e33905b7975d9f

  • SHA1

    495c3ed83f0990d6774a92263a61ce32ffef2767

  • SHA256

    0069b343769c2ed48f7704e0ad671b961aab35abea46d38add71a33077f56c99

  • SHA512

    00fe74968517f26277101cce50a982eace2862331457e73937273d029a010ba721351029f041d1e04a226f2785fc0ad89976119a395bba192933fe3fe4046d44

  • SSDEEP

    1536:LIB5U4yVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq47rN:LujyP3R5fMOAa3zx15AvN

Malware Config

Targets

    • Target

      742-1-0x00400000-0x0043affc-memory.dmp

    • Size

      169KB

    • MD5

      9032d52e4ae97dec85e33905b7975d9f

    • SHA1

      495c3ed83f0990d6774a92263a61ce32ffef2767

    • SHA256

      0069b343769c2ed48f7704e0ad671b961aab35abea46d38add71a33077f56c99

    • SHA512

      00fe74968517f26277101cce50a982eace2862331457e73937273d029a010ba721351029f041d1e04a226f2785fc0ad89976119a395bba192933fe3fe4046d44

    • SSDEEP

      1536:LIB5U4yVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq47rN:LujyP3R5fMOAa3zx15AvN

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks