Extracted

• • Target

    696-1-0x00008000-0x00026464-memory.dmp

  • Size

    76KB

  • MD5

    44f0f33e5ff7d4cfc29463365b2ddf1b

  • SHA1

    c8ea16189e184d28f9c53e924df26d9b5c2c3300

  • SHA256

    54466136e273ab4a83959861735982ca9265a81f03ec54783903dd276e6b5f72

  • SHA512

    f5be6d8efada1928e3ca166b350cb6cf813f67956762e9f3cbca87c89183af09431e1e02db7a84f0fbb1bb7eb2b16e742386cc3f30e747fd769941d2b88805ba

  • SSDEEP

    1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8o6:RowpuQyNSG2eRa1styK9flTQPHo

  Score

  7^/10

  defense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  behavioral1