Extracted

• • Target

    359-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • MD5

    1d34a3d2e81937cf70e827cf6e6281b8

  • SHA1

    0d71ede86608ce77600e1e6055d285d23e581d4e

  • SHA256

    9dead8f49cf444414cda96091e2678f206c817d879379e2d965a5b672c6a3cda

  • SHA512

    8c3d7b9e01f226cf6d7d41fbaeee9ba3d73f79af161db8bc2cde295083561be1d55e93bff6587f8e3fac7379c7009c0428e7349b87786ef9daf8535320480586

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8o4:RowpuQyNSG2eRa1styK9flTQPHo

  Score

  9^/10

  • Modifies the Watchdog daemon

    Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder

  behavioral1