05c6285077c3622cb563fbda75cf517e98329d0efd5d8459250066ac9b827b72 | Triage

Analysis

max time kernel
12337s
max time network
150s
platform
debian-9_mips
resource
debian9-mipsbe-20221111-en
resource tags

arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
03-04-2023 12:59

Sharing

Report Analysis Logs

General

Target

41a46dd1d5fcb14af99c08d91ad481fb.elf
Size

148KB
MD5

41a46dd1d5fcb14af99c08d91ad481fb
SHA1

d6911c3d0b14e66de3e3dd92439d4c71e0af2c81
SHA256

05c6285077c3622cb563fbda75cf517e98329d0efd5d8459250066ac9b827b72
SHA512

1a8e0e95b49b03b5c6d175ee1661956f9f6ddf023ac96338dc51e7a013d6765edeba6b1be57f7e096f4d226b76935e81113cfaa7eac5987c665a0dfaa3780cce
SSDEEP

1536:mVNs7K797V+nv57gbj6l6T6B6v6N6/6AePe1ebeZe5bwClA2rKQA1dXAQTI/e0hc:vY01ZkXAQT4NJ9//ImlWs4zWfOodW

Score

9^/10

Malware Config

Signatures

Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

Impair Defenses
T1562

/tmp/41a46dd1d5fcb14af99c08d91ad481fb.elf
/tmp/41a46dd1d5fcb14af99c08d91ad481fb.elf
1⤵
PID:328

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...