Extracted

• • Target

    638-1-0x00008000-0x00021848-memory.dmp

  • Size

    68KB

  • MD5

    9b9db8876d8e526f6aac92bb057c45e2

  • SHA1

    238e3395a9c29d489c892226abfa18c94fa5903a

  • SHA256

    334a741fb712264341038ba8bc1926ea3695861255e4d8d49346db68260ebf1a

  • SHA512

    98a7e914fe10ada2eef8ae1c7cfdbfda3fe8e26f9854e229f57cbd2c2cc9861e0934f8745e7ffff21a75d6f51138d66deea23560c3ee54cda1e522b32ad7a3b6

  • SSDEEP

    1536:P3nPPrsScdVFKQrVqcbZj4mw1SATDG9CG8uggUt5eF2YnQRHOAUTvObuX:flcdVbVYzYUfgbHX

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1