Extracted

• • Target

    1552-1-0x0000000008048000-0x000000000805a9a0-memory.dmp

  • Size

    68KB

  • MD5

    b1d5bdfe80d62f5b5104be126bb50012

  • SHA1

    ce706c2dfef2d0dd5ed0f2f2dc1044212f267f8f

  • SHA256

    3c6536fc22e67a606f9301f8e1b0c2c8b072e9cb16ee41dc027da43c84ce755f

  • SHA512

    118c0040fb161d2566da5aba1e83d7f456b94108f117ed188545f9c639a50705f8281bc5ba6d30f1aa38174dfc111a58b1845a8ebe2b0a252e42f82cd62d7db2

  • SSDEEP

    1536:IbL+2CfPSc8wfBbrKAEtm7GHD9i/0Sb3nyuafg7cLkSo:it0Sc8wfBbmAEtm7KA/3yuaIQLkSo

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1