Extracted

• • Target

    657-1-0x00008000-0x00023668-memory.dmp

  • Size

    76KB

  • MD5

    9d059ebce15e6298efcbe69eb7df91d6

  • SHA1

    2fb74976882c3ec80f3e87334d300a8badc48eb8

  • SHA256

    b5f5c52e8335788f16ddd39f437ecb40bb701bc607c815e640c3b65398066b60

  • SHA512

    6b50ea476fd4cb3ae56157ad61eb7d69e16a2c79d69322cc6296e92433fd8e5f16bbfd86f82e8a1798cae17a51878faac43efac751aa4f81cf7bd0b2b995bdbb

  • SSDEEP

    1536:yCr8byuX0r/N2v/K4Fp/xPW8z8yjJzVx3IYVMH:yCr8byu3KU/zDZMH

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1