Extracted

• • Target

    649-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • MD5

    f9ac3a793402d60727d56a5ce8ed6d12

  • SHA1

    497e8f238c8e60a14beb7a3c840fa16a26b91d4a

  • SHA256

    0ec5d27ccd8ae5372ecfc4e4aa1e84b896fcf9ad56a113707797daed2c8b7204

  • SHA512

    7096b8df25f0e85ff783bc740a78be70d728fc767ed4c64e3ace73d0ab220584efef533558dd5e897fb4cf719addd8006d571495c3f0b8447e2253c49833e548

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8ok:RowpuQyNSG2eRa1styK9flTQPHo

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1