Extracted

• • Target

    57510x00000000080480000x0.dmp

  • Size

    72KB

  • MD5

    cf8c5ee905b2e83e928971a57cae366b

  • SHA1

    0ec0e91aaa33d153b5cef8254ed2c0c1e0f7e498

  • SHA256

    0b838e50b592f8f4eeab22a866d7aac139a1b253f9e4453ece9819b279492398

  • SHA512

    2b125138a01bfc50979ea2821584169c5e577f1e82ed99a29324aaa8877cfda1c06755928b593afc91c23e7ff083354506bc3b047d0c2176e7719cc9425c3369

  • SSDEEP

    1536:fTLNnhwASC6o//kIipmM4+0Qwtxje5QpyBz2SWE/jjWro+9OmqIqQ4LCI:fvNhwAd6o//kIipmbawxjewyBz2SWE/T

  Score

  9^/10

  discovery

  • Contacts a large (20161) amount of remote hosts

    This may indicate a network scan to discover remotely running services.

    discovery

  • Creates a large amount of network flows

    This may indicate a network scan to discover remotely running services.

    discovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets

    Gets active TCP sockets from /proc virtual filesystem.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1