General

  • Target

    737-1-0x00400000-0x00455ac8-memory.dmp

  • Size

    85KB

  • Sample

    250109-1qatvstrgm

  • MD5

    f80e2386c459fcaca4c3bb482d37597d

  • SHA1

    608f6de35369bc94b471a91fb6ca13e689aeca3e

  • SHA256

    7100d35eacf9804321c3b8fe95720330d4e942c86187fbcc3ace266505b2e8c5

  • SHA512

    a6b7cb9109852a10f0521c94ae1321f8e35196a45ec9566bf50994f998471ce6c9a464df4018340ff00988568f29c7c13ec8d0c7607f1e016ec92271e462171f

  • SSDEEP

    1536:K9yr1qbFxLTtDsK7r6wPR+t3x6pHGa+2FZg/0A867:Kyr1qbFxLTtDsK66R+tH2FFo

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      737-1-0x00400000-0x00455ac8-memory.dmp

    • Size

      85KB

    • MD5

      f80e2386c459fcaca4c3bb482d37597d

    • SHA1

      608f6de35369bc94b471a91fb6ca13e689aeca3e

    • SHA256

      7100d35eacf9804321c3b8fe95720330d4e942c86187fbcc3ace266505b2e8c5

    • SHA512

      a6b7cb9109852a10f0521c94ae1321f8e35196a45ec9566bf50994f998471ce6c9a464df4018340ff00988568f29c7c13ec8d0c7607f1e016ec92271e462171f

    • SSDEEP

      1536:K9yr1qbFxLTtDsK7r6wPR+t3x6pHGa+2FZg/0A867:Kyr1qbFxLTtDsK66R+tH2FFo

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks