General

  • Target

    711-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • Sample

    250103-gt6wxsvnbr

  • MD5

    1b86682d7d0124bbe79a5761793237f6

  • SHA1

    fb11fcd94686ff31268baaaf4f7c99b7c2ebf268

  • SHA256

    92f619aab0703709f25aee87a8687dd4e23cca6481bdfabff021f7724a9a5cf7

  • SHA512

    a9c5e9b96fd70496d659eb505d78871bcf76bc09c0d1316b26f57a5812f29829abaf380dfd73e7456fe399be6a20bac93f568f27f194935d6e9b0812fff8d40f

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8of:RowpuQyNSG2eRa1styK9flTQPHo

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      711-1-0x00008000-0x00026464-memory.dmp

    • Size

      76KB

    • MD5

      1b86682d7d0124bbe79a5761793237f6

    • SHA1

      fb11fcd94686ff31268baaaf4f7c99b7c2ebf268

    • SHA256

      92f619aab0703709f25aee87a8687dd4e23cca6481bdfabff021f7724a9a5cf7

    • SHA512

      a9c5e9b96fd70496d659eb505d78871bcf76bc09c0d1316b26f57a5812f29829abaf380dfd73e7456fe399be6a20bac93f568f27f194935d6e9b0812fff8d40f

    • SSDEEP

      1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8of:RowpuQyNSG2eRa1styK9flTQPHo

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks