Extracted

• • Target

    655-1-0x00008000-0x00020b48-memory.dmp

  • Size

    96KB

  • MD5

    e46e84d461dadab6cefbd2db7dd62a0e

  • SHA1

    8016569dfe7cc66d782d865a0c0a770efd2d3aae

  • SHA256

    96125564b984a3a030d1912fbe68ca3a3bc1f4e4ef20bdb9c147199b9d0054aa

  • SHA512

    a93ae7b67dbf3272942f42f657c9e610927ae672ab2e558fed767beb42cbc44c9c583793bc1d6eda735b9c01ddf3322f285b87e59cc7799eebfabe77a840748f

  • SSDEEP

    1536:7XnpuoZnZ4N5Q029rn5bzi1ARLBKUY4mYhbyMOrlcDZlmcKqF36riFNYIGYVKWdr:4SaNNcJBB3Ir2ZlmcKMFN1DUET

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1