Extracted

• • Target

    2441-1-0x0000000000400000-0x0000000000614b00-memory.dmp

  • Size

    77KB

  • MD5

    a4a97c1ab0de554f91fb804680975284

  • SHA1

    8f825d480de4443776ff44eaca3cd9c2aa4528b1

  • SHA256

    7f300531e4abdfa4d109748dc59e8620840fe8db77dabbea64f38bb99b0fdc06

  • SHA512

    9425b7bfa99fe17f899d458e84c8fc1904fdd824701590ca0d60f056a47b0e09678d887134dd73c534e78ccaaa5e206535445ab27461c91fc412096752ad4a4d

  • SSDEEP

    1536:5sdR92glIQRSF2MhldlO+ttM98cKJdxZZxJ+BAQoEQ1It3R+yd5bUWarW8j0tZxZ:md6dQRSQsdlX/3An2tc

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1