Extracted

• • Target

    646-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • MD5

    8e8c6cd8cf18654abecf06cb0dafe3a1

  • SHA1

    bad820c85e524d181003268a5458397688f0409f

  • SHA256

    3ae70efd32d3885614b788ce3f9ac3b0c3cda372f6ab5344570156d634c0e3c0

  • SHA512

    6fb16a364ec4fcad32a4898f0eeb16df47740af70e4cfeb1c5f4b01526ef8c69a77654e9d248eec64d3ffa65a8e255dcfa297a301e46405919b63a59aa561c17

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8oN:RowpuQyNSG2eRa1styK9flTQPHo

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1