Analysis
-
max time kernel
34008s -
max time network
150s -
platform
linux_mips -
resource
debian9-mipsbe-en-20211208 -
resource tags
-
submitted
06-01-2023 07:50
General
-
Target
b2239b81a9968bb76bc5944c187e989f.elf
-
Size
125KB
-
MD5
b2239b81a9968bb76bc5944c187e989f
-
SHA1
22dd3e7bbbf3702e49c62cc0038b1b458223d4d9
-
SHA256
798c5b236a2c2ad1a00d9a4fdce13518fae9402b67b5a683b9123ec261340a05
-
SHA512
26d6489968b603ad5910c04a0d231082b8de95140db24068eb866971b528c9b9cdae683a7f9261daaaa60be015a9cac4df0f85f4eee723695439942727d50861
-
SSDEEP
3072:jiG4jOVlNdJVqDusN+7S4p9KUgrUEjcNyWNkyKwO49ld3Fb1liWtIF:jUjOVlNd3qDdN+OI9KUgrUG0Fb1liWtI
Score
9/10
Malware Config
Signatures
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/b2239b81a9968bb76bc5944c187e989f.elf/tmp/b2239b81a9968bb76bc5944c187e989f.elf1⤵