82c426d9b8843f279ab9d5d2613ae874d0c359c483658d01e92cc5ac68f6ebcf | Triage

Analysis

max time kernel
6294s
max time network
150s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
submitted
19-02-2022 13:30

Sharing

Report Analysis Logs

General

Target

82c426d9b8843f279ab9d5d2613ae874d0c359c483658d01e92cc5ac68f6ebcf
Size

148KB
MD5

d38cc4879fe0bc66cb8e772b28fbfd15
SHA1

f9415ecc8dbfac555b14378000bafaefc820947c
SHA256

82c426d9b8843f279ab9d5d2613ae874d0c359c483658d01e92cc5ac68f6ebcf
SHA512

b5e7df3093e9b2c327839b115c2be09aec617208d9369b7edf0c3e380f6aa390bda2780789707d561015f82e5880fcf26cffbe5d435c771c49dd401f1542896d

Score

9^/10

Malware Config

Signatures

Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

Impair Defenses
T1562
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.

Processes:

description ioc

/proc/ /proc/

./82c426d9b8843f279ab9d5d2613ae874d0c359c483658d01e92cc5ac68f6ebcf
./82c426d9b8843f279ab9d5d2613ae874d0c359c483658d01e92cc5ac68f6ebcf
1⤵
PID:331

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...