Extracted

• • Target

    2459-1-0x0000000000400000-0x0000000000614b00-memory.dmp

  • Size

    77KB

  • MD5

    9c082fee0cd065b7d60d9bf07337adf2

  • SHA1

    48c4cc659d9f4bff4d77aa0ab50aee5292abcaee

  • SHA256

    8479352f78c686a2186e6919a8a6b062c8c8c155cbab9034cb1999671fc46327

  • SHA512

    0673a463d801bf60a4e174f3baa1b85864bdf1548e956b8e28bf1caedfec9bddd67a9e7cc17c5417d23e75f9c5529a0d584a604b00fe6d58b1d684925b436194

  • SSDEEP

    1536:y3UABX0MyjCIMs3dltujNcdl/qJ9xZZxJ+BANoEQ1It3R+yd570WabG8j0tZRX1F:+T6MyjRDdlQpGM3rkk

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1