Extracted

• • Target

    706-1-0x00400000-0x00451a58-memory.dmp

  • Size

    69KB

  • MD5

    81abedded73e95b70c70d89468823835

  • SHA1

    5f07ddbaef56a3582f767efdfb659b85199dc881

  • SHA256

    8488cfe5ce9cf50a0e09fc49f8d7082d028f4b3757d34cdebcd597db6af40720

  • SHA512

    7394855723cdf5d4de5e711c709fb61236d9889bda6ae469826c6ce9a9aa4d5cfebdba25242dcccc87cbbef85d852d598d056ca6a76bd9a4a3482952cea02609

  • SSDEEP

    768:kZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatAx:BnN4ZH2SyOyuIq8LMEIUq+cvtpvXz8Le

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1