Extracted

• • Target

    665-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • MD5

    20fe94a8a628396e2f19794bee84dd03

  • SHA1

    3a0b746b4f3c9a97ef92173d23ff2ba41df782a0

  • SHA256

    b6a2de708f89bed3e51ea7cd7d7fa9b6b22bfd305c848a64acf0d7b5081ea76b

  • SHA512

    16d58bd2ea98dee94e0129b289a0ba69987d85294fc5f642dfb89d062646db4737832aa07b7d18e53c3ca0ce5131904a28105bfe5d7b510a45c1f70907ee483a

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8oI:RowpuQyNSG2eRa1styK9flTQPHo

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1