Extracted

• • Target

    1587-1-0x0000000000400000-0x0000000000614b00-memory.dmp

  • Size

    77KB

  • MD5

    ba87e19c8aa3fa63ff7c58881ea64af2

  • SHA1

    155238e14e2996c2ce71eafb02f6f3cef449f40c

  • SHA256

    bf5bcd45dc9723e5e834e1ada4f9048144913608cf88a9868c1c2b39f5faaa57

  • SHA512

    61544931f63b9e5f6ba0bc991ed60f8d1be62f5a23b464ee1a64e622f7886507e0db1c42c983bcbe67ba685b339c560660dc16784d69ff832e1b76c2c63027d9

  • SSDEEP

    1536:5sdR92glIQRSF2MhldlO+ttM98cKJdxZZxJ+BAQoEQ1It3R+yd5bUWarW8j0tZxw:md6dQRSQsdlX/3An2uc

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1