Extracted

• • Target

    1565-1-0x0000000000400000-0x0000000000614b00-memory.dmp

  • Size

    77KB

  • MD5

    e4357cc47f36200c739ebffb89b282c4

  • SHA1

    b13d6d4c7e21378718bb6822497ae38f21ba4008

  • SHA256

    57e8307ca8933bc66a905344a1b1e5c94ca4e29c9594409b624f18ea0cbdffcc

  • SHA512

    af832fab19e283ba9037550ba8ab163d1c83ec5b745a1c8070aaa3f0295b696f83cedff9b32d2cf0cc48e70adb693b5f16ab83a5ea71154892b452374a521bbd

  • SSDEEP

    1536:UtQ59MwY2MhldlO+ttM98cKJdxZZxJ+BAQoEQ1It3R+yd5bUWarW8j0tZxH1c2Yq:UfwfsdlX/3Anm7c

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1