Extracted

• • Target

    1575-1-0x0000000000400000-0x00000000005156e8-memory.dmp

  • Size

    73KB

  • MD5

    6d7c18051d4e7a5bb6989254bf808301

  • SHA1

    b672271d5c612d1def6d1904d36292a877ebd9ba

  • SHA256

    8faf117f8e58e78df41bf70a5857b1ac3b09b4246332e2a0b83b1613bd68cb50

  • SHA512

    fe8c03b934703773054181eac02001d368962314f5c20180f0a119f6384e12593823276c0cf613f67a1d455fa152c8b5fa0e3f7571a8b5d218e7369b612bcb27

  • SSDEEP

    768:vgbgWgQ5bd+2RcZmT9lX8RTt7sVzJuPucHNVzibDj+C5bz4Hn7UKAv+kblUZ3ak/:WeuIZobvuGctIb/+w4HnC+8l8AnzcfH/

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1