e704a253debb3557c81d16455e69833cf41202b26b5567cbe4cfde38abb7443b

Analysis

max time kernel
0s
max time network
154s
platform
linux_amd64
resource
ubuntu1804-amd64-en-20211208
resource tags

arch:amd64arch:i386image:ubuntu1804-amd64-en-20211208kernel:4.15.0-161-genericlocale:en-usos:ubuntu-18.04-amd64system
submitted
02-03-2023 19:51

Target

9c0c1555fa9fa3da9c94925f9a937abf.elf
Size

60KB
MD5

9c0c1555fa9fa3da9c94925f9a937abf
SHA1

9e285945b439bf32532513eaf563290b1b51ebb0
SHA256

e704a253debb3557c81d16455e69833cf41202b26b5567cbe4cfde38abb7443b
SHA512

d7b3f34b8707e814e4dc7acdbad1e55077b07bce1e0c94a1d78b101623cfa6fd7ebc0f05d41c3693eaa228fc344e62674759fb53206fc75ce2791c9937fd7250
SSDEEP

1536:ESEKY4Jzjw+Qld5UIqZEZtY+fq+HdHNxZRe0Hcl2k:m+s+Qj5UIqZEZtjfqmtxZRexl2

Score

9^/10

Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

Impair Defenses
T1562

Reads runtime system information 7 IoCs

Reads data from /proc virtual filesystem.

/tmp/9c0c1555fa9fa3da9c94925f9a937abf.elf
/tmp/9c0c1555fa9fa3da9c94925f9a937abf.elf
1⤵
PID:570

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact