Extracted

• • Target

    646-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • MD5

    17c8602aa2b1a67531475be3220b4fb7

  • SHA1

    880778dcb363f3e5d2f8b79fda5471061e2e2303

  • SHA256

    4bd7b0e0e1574044819108a5b7cfff45e3939b6358c8c5f23ae366ca4f69d73a

  • SHA512

    c0d4c9eb91a79c109ea7669252424068f1b68db159cdd0133e095f1ffac6df435383d865a2dc03623c03d2d30044139ddc7b13bafb21d8665695700a2486a13a

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8oS:RowpuQyNSG2eRa1styK9flTQPHo

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1