Extracted

• • Target

    597-1-0x0000000008048000-0x00000000080547a0-memory.dmp

  • Size

    48KB

  • MD5

    622b2c19a52b930abc8f22bee3d24731

  • SHA1

    707ab67a5cb25598eabb18e9f9f365ce2e3d8146

  • SHA256

    5fc1b19973e23132beda9d71837f335c6c01fc65ea1b3ddc1ba7eea689321c9c

  • SHA512

    32e79ba88bd11f4b99ceb1d1683ddc23fef200a4b6aa9177839d9514c7e498df32a77770f3c52182e8382e7644a89148b22ea797c5fbc5174a4a4993660726ed

  • SSDEEP

    1536:6nJRT4QPfZfW5XTOeY3Dve3AGX57/4Qw7bn2i1eA:Gv4QPfZfW5XTOeoEzJ7AQwf2ij

  Score

  9^/10

  • Modifies the Watchdog daemon

    Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder

  • Reads runtime system information

    Reads data from /proc virtual filesystem.

  behavioral1