Analysis
-
max time kernel
0s -
max time network
140s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
16-08-2022 10:17
General
-
Target
95ba1885636794e40938437152446e42
-
Size
113KB
-
MD5
95ba1885636794e40938437152446e42
-
SHA1
ac37a4d40572f9c4e69d239fdf78e2265014ab55
-
SHA256
699826855729446766f3fc296c3fd893c031dc337f2e15f1757d44ec7e6f67b2
-
SHA512
2364e7894d00138499d8a5e153b6ac05cd9c245710a2ed61ae29187ffd1c2705beb66b989db6a545cc673b9cf500eab476188c923fe22d7f3e4331f9591c481a
Score
9/10
Malware Config
Signatures
-
Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Modifies hosts file 1 IoCs
Adds to hosts file used for mapping hosts to IP addresses.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/95ba1885636794e40938437152446e42/tmp/95ba1885636794e40938437152446e421⤵
- Reads system routing table
- Reads system network configuration