Extracted

• • Target

    1547-1-0x0000000008048000-0x0000000008059830-memory.dmp

  • Size

    57KB

  • MD5

    daafbb5529958f0c40510d7707e5afc4

  • SHA1

    044a881b04bc088ac555447c8438f34260fddb51

  • SHA256

    57354b5fd8754acd89131116d20b2841f2b20bedfc1d8e5c8ca2ced57d7ee4bd

  • SHA512

    a347cfa60af91f0fd88c23f942c868a719e0a05998a0b092cba7129bbfc5553dc8b3185172cebb3347233d0f197f6748495376f6e233330929722d465934f78e

  • SSDEEP

    1536:X1gao25TBFulRcpFZMkAGslEhUZxuBBFNbQc7:FgaoMTB+RP52UYzh

  Score

  7^/10

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1