General

  • Target

    741-1-0x00400000-0x00452a58-memory.dmp

  • Size

    73KB

  • Sample

    241227-c8xjkszpgx

  • MD5

    746659d14bdecbaab591257fc83d2904

  • SHA1

    71cdbb52500eb7c3a1c082e17b6ed8c3a7338bb8

  • SHA256

    ee6f0f3643fdc89577b0810470dcac40a5b3e5f29e443afde45786d722b2362d

  • SHA512

    2f28980b3c0277cea0b09452fcc72e47e833083691d02e62c7316333a2f4dbd381f082b55a21537623aa4516a0a1916664ef459820e96aab627c7cb92011ed2c

  • SSDEEP

    1536:oJPEBmW5iNWqcGTkwnXHZ84OqdZerESt9P:oJPEB8NWq9hqqd0l

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      741-1-0x00400000-0x00452a58-memory.dmp

    • Size

      73KB

    • MD5

      746659d14bdecbaab591257fc83d2904

    • SHA1

      71cdbb52500eb7c3a1c082e17b6ed8c3a7338bb8

    • SHA256

      ee6f0f3643fdc89577b0810470dcac40a5b3e5f29e443afde45786d722b2362d

    • SHA512

      2f28980b3c0277cea0b09452fcc72e47e833083691d02e62c7316333a2f4dbd381f082b55a21537623aa4516a0a1916664ef459820e96aab627c7cb92011ed2c

    • SSDEEP

      1536:oJPEBmW5iNWqcGTkwnXHZ84OqdZerESt9P:oJPEB8NWq9hqqd0l

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks