Extracted

• • Target

    1563-1-0x0000000008048000-0x0000000008059900-memory.dmp

  • Size

    60KB

  • MD5

    7962a013ee87b52664761928501f34fd

  • SHA1

    2a4daa5fb049cbe1b4884d19e0c7f971dba38c4e

  • SHA256

    fbcda725a099860c1658892fbdba5dd3ac8ba278dbc17915105a29f36d6d29e3

  • SHA512

    b3939512696894f9f8e0ca594dffba70c4e3efcdea27ba06420e1f5fa5b8dea9f6caafebe65f943ec9edbb5e241203376c337f7d3f13f562844d13811d0c8653

  • SSDEEP

    1536:WkhQIWNrts1sGLhAjb5N4ve43WF0y7kTUOG9G2emCySPLZ:WkMNxs1sGLhAjb5iP3WuUkTC9LxC7LZ

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1