General

  • Target

    708-1-0x00400000-0x0045af60-memory.dmp

  • Size

    98KB

  • Sample

    250111-24xq8atnhs

  • MD5

    2feab8433ca4c5483836ddd088667086

  • SHA1

    0e4ab03c9b109c4c2fe87393242dee5d3761d2e3

  • SHA256

    3e69ace87e5c65a23b590d6d5a472bcd3c308c48fd039b2a1a0c6fa54ce76705

  • SHA512

    4d94ce0739e9fac685ae3783daa9a7d1a626f7f93b2d5b8656b7bd236a042e0650a20a303404bf64e44fdf6260a4987fbb4224213c50045ae1e299d64904101a

  • SSDEEP

    1536:HpaZOuT/Q30SQXa1r3J62yqPy/RWLW0edmpwjeNNYC:0ZzTJa1rZ62yqPy/ULWzjeNNl

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      708-1-0x00400000-0x0045af60-memory.dmp

    • Size

      98KB

    • MD5

      2feab8433ca4c5483836ddd088667086

    • SHA1

      0e4ab03c9b109c4c2fe87393242dee5d3761d2e3

    • SHA256

      3e69ace87e5c65a23b590d6d5a472bcd3c308c48fd039b2a1a0c6fa54ce76705

    • SHA512

      4d94ce0739e9fac685ae3783daa9a7d1a626f7f93b2d5b8656b7bd236a042e0650a20a303404bf64e44fdf6260a4987fbb4224213c50045ae1e299d64904101a

    • SSDEEP

      1536:HpaZOuT/Q30SQXa1r3J62yqPy/RWLW0edmpwjeNNYC:0ZzTJa1rZ62yqPy/ULWzjeNNl

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks