Analysis
-
max time kernel
0s -
max time network
152s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
22-08-2022 09:01
General
-
Target
253840c1b3d2b310f4b911e02ff99a88
-
Size
113KB
-
MD5
253840c1b3d2b310f4b911e02ff99a88
-
SHA1
46142ee3171e77f8016d4f911fd182f8dccfc87b
-
SHA256
6d5c7f978461ad4257cf22767f99415b90b888f74955e2ca4f3308556611c399
-
SHA512
889bad16b9b584b52bab532a19494f04380acf3abeee8897c4fa44a35ee281c7e040acd975d09ab77895fd3d28b73938b50c3b99edf764cd8d72fbb143b565cf
Score
9/10
Malware Config
Signatures
-
Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/253840c1b3d2b310f4b911e02ff99a88/tmp/253840c1b3d2b310f4b911e02ff99a881⤵
- Reads system routing table
- Reads system network configuration