Extracted

• • Target

    703-1-0x00008000-0x00020b48-memory.dmp

  • Size

    96KB

  • MD5

    bfd961e6d994292e05b1b230d685dcd9

  • SHA1

    b5736d5c62c2ca25edde0c76b8499568756aadf4

  • SHA256

    390cc50df5bd566cde4f6f8e412c3c99e4c1e3d957bc512771e119cec4b81870

  • SHA512

    87bca83c20c70cc6a4f91af9b425635faf23552d28b0b6afe8921e90dec8fdbd180b0bda2fe147f8381a62c548db1aaf587c675720b95c91e1fec9f6a1ee62e6

  • SSDEEP

    1536:7XnpuoZnZ4N5Q029rn5bzi1ARLBKUY4mYhbyMOrlcDZlmcKqF36riFNYIGYVKWdy:4SaNNcJBB3Ir2ZlmcKMFN1DUEq

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1