Extracted

• • Target

    648-1-0x00008000-0x0002a5b8-memory.dmp

  • Size

    93KB

  • MD5

    7f6cd4067a5c783795877810530a1552

  • SHA1

    694bbc9d8d49c967c0851d21abb3370a07606f6c

  • SHA256

    2c3e082266d2c6f3ac8df330cfcc27048f9b6897aa9418d4cb43ca4556d8904e

  • SHA512

    36d85a410ee2aae94fd29a6beabb4cb6573363d70077459f29f8f51f3bca80082aa94ee4ede2fdc5d42551459fa473395a45ff02927545eb04c018787088d377

  • SSDEEP

    1536:UCncesuyP8VQ6HpPKsltoGzGVOUrWUoeaVhUIPeDU1ztllh+FiX0pIddY7gpFkN:cdPAQiP7zfmBoeaVhUIPeI+U0pIddPpy

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Writes file to system bin folder

  behavioral1