Extracted

• • Target

    704-1-0x00400000-0x004669b0-memory.dmp

  • Size

    96KB

  • MD5

    6ea329caf0d11bcaec59e23d2fb555c8

  • SHA1

    2f2f59f2cca16a8918b3555996e553e24bfe7d0e

  • SHA256

    ff3f0d2d6df314a78375479278e549662cfb6d0b0a259b1715b4f77a584b6c52

  • SHA512

    e709518be30545b3002550f37e38d715f1deed28ff8f6190ced8fff8a3171aed6c4d741ae0e742b58c3d35db08b816bd7fb0ea4911e6f417f14f6e648f59f7ba

  • SSDEEP

    1536:JHz/LXDKTTA00W3botHDDHj4fRQ8ceBuSTpldfncGZpQte09mw5:cvB0W3boRwXBuStldPcGOQw5

  Score

  7^/10

  evasion

  • Changes its process name

  • Deletes Audit logs

    Deletes logs related to the Linux Audit framework.

    evasion

  • Deletes itself

  • Deletes system logs

    Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

    evasion

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Deletes log files

    Deletes log files on the system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  behavioral1