General

  • Target

    744-1-0x00400000-0x0045af60-memory.dmp

  • Size

    98KB

  • Sample

    250111-27jnrstpgt

  • MD5

    2ae22f30cfbd3494677d4f810b813828

  • SHA1

    68a382d1f9d6cc9bbf9c547833a8564563701fd5

  • SHA256

    49881de4c47af6d03215d88b90c294874dcc39d84d66b971f678014c61945422

  • SHA512

    bce497e72635da83fde5b2e48b729961f022a73aab50ce7c75b28bb146f9f7a52d50b6cf6b4528e6380e77e1beebda43e0401554868c2c36413086b9ecf4fdba

  • SSDEEP

    1536:0xODm3pPRWNqq28QDSfIMFQfgAZ+0u8vZjemPT9ESKhC7q0rU:00DOpPRWu8ERZ+0u8vjhhq0rU

Malware Config

Extracted

Family

mirai

Botnet

LZRD

Targets

    • Target

      744-1-0x00400000-0x0045af60-memory.dmp

    • Size

      98KB

    • MD5

      2ae22f30cfbd3494677d4f810b813828

    • SHA1

      68a382d1f9d6cc9bbf9c547833a8564563701fd5

    • SHA256

      49881de4c47af6d03215d88b90c294874dcc39d84d66b971f678014c61945422

    • SHA512

      bce497e72635da83fde5b2e48b729961f022a73aab50ce7c75b28bb146f9f7a52d50b6cf6b4528e6380e77e1beebda43e0401554868c2c36413086b9ecf4fdba

    • SSDEEP

      1536:0xODm3pPRWNqq28QDSfIMFQfgAZ+0u8vZjemPT9ESKhC7q0rU:00DOpPRWu8ERZ+0u8vjhhq0rU

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

MITRE ATT&CK Enterprise v15

Tasks