Extracted

• • Target

    655-1-0x00008000-0x000236c8-memory.dmp

  • Size

    96KB

  • MD5

    5ffb9f90998989de4841c827951edf6a

  • SHA1

    d41dad1d52e6723e167ea685fae64e6084aaff9d

  • SHA256

    7c92698e30c83e10610f1d290c7177ec628ce442321ebc6e3ca24b9ec02d424d

  • SHA512

    20939854f0f2e0bf46c5c9006d95fc81e760f290333c2b3831c7ea90a75e6aa78e5fbb67f3f883d650a0511f4d9d4f1cca74555504d17a224ef1d061b0d6c251

  • SSDEEP

    3072:s2bmltnY4BRae/xGPZ06v/mYp+C9T6Mjc5:XbmltXRae/xGPd/z+cT6Oc5

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1