Extracted

• • Target
    dipndotsk
  • Size 114KB
  • SHA256 048e141702444518fe3c0a5c8cf7a0c9dbc9b937a425ddd0df134f905527b9bc
  • MD5 151c4560f75d45f596ad9d18bb806c9b
  • SHA1 b8b65d83af8f4f6a73bb958bf8348de95ab986d9
  • SHA512 914492823cfdd4be0026090dbdfa74e2c311853aa6b984a2b0d25b373367bd599e6a54aa5b1b24f32135e12b5ce208e1a0a57f96db74965acc816c394fb5607a
  • SSDEEP 1536:BmrixQQWa4WW1nbAcse5o+TThaxBmgsOZPzzuAV+EZfk2:BmrixQQotAxGOlUEZff
  • TLSH
    T10AB3070ABF650EF7EC6FCD370BA90706258C591612B83F3A7634D91CB64E64B1AD3864
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  credential_accessdefense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Traces itself

    Traces itself to prevent debugging attempts

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Reads process memory

    Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

    credential_access
  behavioral1