General

  • Target

    746-1-0x00400000-0x0043affc-memory.dmp

  • Size

    169KB

  • Sample

    241227-rmvv7awmhr

  • MD5

    e11b18137389b7376a56c9426c0b3b65

  • SHA1

    1b0ae482a2136a6b1038bd9bad82571665ad295e

  • SHA256

    8483a6304e55d43e0535908f505a966f3873c4064506437c94801cfdf78d7c76

  • SHA512

    a79b3daf11f8cb6f1e7264a4fe5f7c99c51b6317fcf83a4212fed16ebb2286a6e040c5de1778f735773c133fc088781b2f07ffce466fb43a8c3b5afc98953d09

  • SSDEEP

    1536:LIB5U4yVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq4QrN:LujyP3R5fMOAa3zx15AoN

Malware Config

Targets

    • Target

      746-1-0x00400000-0x0043affc-memory.dmp

    • Size

      169KB

    • MD5

      e11b18137389b7376a56c9426c0b3b65

    • SHA1

      1b0ae482a2136a6b1038bd9bad82571665ad295e

    • SHA256

      8483a6304e55d43e0535908f505a966f3873c4064506437c94801cfdf78d7c76

    • SHA512

      a79b3daf11f8cb6f1e7264a4fe5f7c99c51b6317fcf83a4212fed16ebb2286a6e040c5de1778f735773c133fc088781b2f07ffce466fb43a8c3b5afc98953d09

    • SSDEEP

      1536:LIB5U4yVP3ODubf5fsOuQ1VbDrb2acdUgozxkq5sMElq4QrN:LujyP3R5fMOAa3zx15AoN

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks