6898796a26f63b6e522403106ff646b7e69dcff3be8e50b3dc0b12b8aba2fad2 | Triage

Analysis

max time kernel
0s
max time network
11s
platform
linux_mipsel
resource
debian9-mipsel
submitted
08-05-2021 13:08

Sharing

Report Analysis Logs

General

Target

KKveTTgaAAsecNNaaaa.mpsl
Size

90KB
MD5

67c43d4b76a4d1cbaac6a56072f9b331
SHA1

f4cc6e1655b7d2dbc0b9bdaabd3274eced0d2e39
SHA256

6898796a26f63b6e522403106ff646b7e69dcff3be8e50b3dc0b12b8aba2fad2
SHA512

835422927c1590369143ac9df658968d04b83d4be4bab40bef106fda60ed2f38d052ae6ee7ed8972cdf4f42333a8bddc8c2fef29b5ca39d05a1c6f77fd7c9ccd

Score

9^/10

Malware Config

Signatures

Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

Impair Defenses
T1562
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

description ioc

/proc/ /proc/

./KKveTTgaAAsecNNaaaa.mpsl
./KKveTTgaAAsecNNaaaa.mpsl
1⤵
PID:313

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...