Extracted

• • Target

    2527-1-0x0000000000400000-0x00000000005156e8-memory.dmp

  • Size

    73KB

  • MD5

    8bbb0527e5bdb2dbfb5edca4fadebb9e

  • SHA1

    27d9aef4a73ff40653cafc78d0398cff7dae3d1d

  • SHA256

    95698eed99aa476bc2cfbca7add7cfd855b422a786fbab4aa50030ebbfe25d8c

  • SHA512

    c7c7724aa951aa27f951f812f2d0fa74f965ed5a3378300217a8d6f8626d7c82f83737b1a353265067ca2d81a889645ab91be416146adb1b52a088276834fc4c

  • SSDEEP

    1536:WeuIZobG3QEWYAIb/+w4HnC+8l8Anzcfj/:huIZTAEzAIf4HT8l8Azcfj/

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1