Analysis
- max time kernel
1322s - max time network
153s - platform
linux_mipsel - resource
debian9-mipsel-en-20211208 - submitted
24/12/2021, 00:29
General
- Target 894fb4cb10bfa6096733c1b1b0b461c4
- Size 31KB
- Sample211224-asyetscgal
- SHA256 2d14e4d3a0f7f35e923cb416e036c1c35fe4f2a67ea034c473fbfe18ae05d3db
Score
9/10
Malware Config
Signatures
- Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
- Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
- Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
- Reads runtime system information 23 IoCs
Reads data from /proc virtual filesystem.
Processes
-
./894fb4cb10bfa6096733c1b1b0b461c4./894fb4cb10bfa6096733c1b1b0b461c41⤵