bf1483bbfa61945f4809fcf2c1233d263ecb7c3f1a2e29c819e59eea61fd831c

Analysis

Target

76ee7ff8a27e82cbba9da8d9c0e15b70
Size

67KB
MD5

76ee7ff8a27e82cbba9da8d9c0e15b70
SHA1

f7ad24f772a8c3632a3fa8c7bfebcf9647613bfe
SHA256

bf1483bbfa61945f4809fcf2c1233d263ecb7c3f1a2e29c819e59eea61fd831c
SHA512

ca2db3e7772cd9ad677d268766d8478385cce50878403a39803ce98eeb92f48a82ecea1ce7683a5652b17b6cdd1e189418c42848c2cd0a74e1eac4a663ede93b

Score

9^/10

Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

Impair Defenses
T1562

Reads runtime system information 12 IoCs

Reads data from /proc virtual filesystem.

Processes:

./76ee7ff8a27e82cbba9da8d9c0e15b70
./76ee7ff8a27e82cbba9da8d9c0e15b70
1⤵
PID:562

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact