General

  • Target
    1ca241a8f6e035693dca09a061b79899.sample
  • Size 90KB
  • Sample260910-tjpk4sdp9z
  • SHA256 5ec2ea71522b49b79da88f266002e8a501e617832d765d4786fd43ec2afd7dd6
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      c901af1db6044a0532694b9c8a0b8c1e4249373d2e3b86f100e5ba14c78f6d84
    • Size 239KB
    • SHA256 c901af1db6044a0532694b9c8a0b8c1e4249373d2e3b86f100e5ba14c78f6d84
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v16

Tasks