Extracted

• • Target
    7de772085a6413e69e1fbc18612bebf5dd8d7cdafbedf41b631e495097450830
  • Size 105KB
  • SHA256 7de772085a6413e69e1fbc18612bebf5dd8d7cdafbedf41b631e495097450830
  • MD5 32bbc4f107715d48f9e0ad4eeabbd058
  • SHA1 ab193110d078a4b271cc61d7f3cfc58183697848
  • SHA512 841896b63887a168ec030a3e8e4a2485408c7cdda25552951fb5c0628bdf9f23952a8ed942374ded3b892ab0ef5f1bcc3393b24c239fb33969a13a1bd6bc762c
  • SSDEEP 1536:jbdwbdwAFwttk9Pfzd1Pv0RapmUWi+yWydoGcXWTIsrduW2sa4NSR4+jOkL3YIiy:jbdwMWtfzbH0RYONWTIIPaiSR5jRin
  • TLSH
    T1C9B32AC1F98B80F6D80B48709126B33FC632D5A58071D65DEF5A9F36DA336C2A613399
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  credential_accessdefense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1