Extracted

• • Target

    1551-1-0x0000000008048000-0x0000000008059900-memory.dmp

  • Size

    60KB

  • MD5

    928bc7a136601ecae2a66bef0a3c82d0

  • SHA1

    f0a9e1b324fa89e351bf9757ec999485bd7a9fdd

  • SHA256

    a5a316873341ab9ebee4538d5b1858247c1395b4f6970c026be3812062c50c5d

  • SHA512

    071086f3511b5e2e4bcd6faf566df9f0ca8a2075bd8ed538aa544a1dbaf8e8ee1f5641e73c61a9156d626d3e17f62aa5ab882e811d31f86936baf57698e4f6a7

  • SSDEEP

    1536:tkYXEjGwApNOuWN7veY3WFUy7knBOmdG2emHSSuLZ:tTEjGwApNOuWJv3WSUknHdLxHyLZ

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1