Extracted

• • Target

    656-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • MD5

    bf19a0931f3e83356eeb0b5fda1b7856

  • SHA1

    8dc133b6e5e0db5093a1cf08da8a3786a8fd5140

  • SHA256

    3766ed22d66da2ecb22400ff6c9773fce9ebadc2e9d4f739d3812e2454bceb19

  • SHA512

    b118f28aeda5dda693c2740f99194bf3008a362df2bc059e3b9f570cbc02cd3667cce68ea9a4ebf51b6eefdc7547671e215e7700f643046d48ebce03cf4154e8

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8ob:RowpuQyNSG2eRa1styK9flTQPHo

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1