General

  • Target

    2830-1-0x0000000000400000-0x00000000005156e8-memory.dmp

  • Size

    73KB

  • Sample

    250111-26j8xawmgr

  • MD5

    84e31a7043c531350b0350e83a784ed5

  • SHA1

    f86baf08e00eecca586dc3fd6d9b67bba8bb9e38

  • SHA256

    1803704d9003e67f4b79e17e1c2e71ebefd1fff8504f2ff397c21c9aa8e70d69

  • SHA512

    0780de962664f36f03ae223a03418d173457961fa35d09dfbafb85a6c48306b10e07191ca532e9700351bc8079bc36271a0f35695d11be02eb0033cb30483286

  • SSDEEP

    1536:WeuIZobBwAnIvIb/+w4HnC+8l8AnzcfH/:huIZRAIvIf4HT8l8AzcfH/

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      2830-1-0x0000000000400000-0x00000000005156e8-memory.dmp

    • Size

      73KB

    • MD5

      84e31a7043c531350b0350e83a784ed5

    • SHA1

      f86baf08e00eecca586dc3fd6d9b67bba8bb9e38

    • SHA256

      1803704d9003e67f4b79e17e1c2e71ebefd1fff8504f2ff397c21c9aa8e70d69

    • SHA512

      0780de962664f36f03ae223a03418d173457961fa35d09dfbafb85a6c48306b10e07191ca532e9700351bc8079bc36271a0f35695d11be02eb0033cb30483286

    • SSDEEP

      1536:WeuIZobBwAnIvIb/+w4HnC+8l8AnzcfH/:huIZRAIvIf4HT8l8AzcfH/

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks