1e5018d80d427eb77b0575d82d9a5e634b92be98853e49abb9e9f1627d6d5d90 | Triage

Analysis

max time kernel
12337s
max time network
150s
platform
debian-9_mips
resource
debian9-mipsbe-20221111-en
resource tags

arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
03-04-2023 12:40

Sharing

Report Analysis Logs

General

Target

792bfe7aedd030b23261c695a38c8e52.elf
Size

148KB
MD5

792bfe7aedd030b23261c695a38c8e52
SHA1

66031543342b0b2cc54f59e7cd105311ec9d7d53
SHA256

1e5018d80d427eb77b0575d82d9a5e634b92be98853e49abb9e9f1627d6d5d90
SHA512

f82d131729ec0a53429170f906d6c69a05f78c40e5815cfb2f1988e3a994c74837053f63bd53b150aaf6094224870f10e356bf65dbf61f858df95dfe0ed8ff23
SSDEEP

1536:mVNs7K797V+nv57gbj6l6T6B6v6N6/6AePe1ebeZe5bwClA2rKQA1dXAQTI/e0hB:vY01ZkXAQT4Nw9//ImlWs4zWfOodW

Score

9^/10

Malware Config

Signatures

Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

Impair Defenses
T1562

/tmp/792bfe7aedd030b23261c695a38c8e52.elf
/tmp/792bfe7aedd030b23261c695a38c8e52.elf
1⤵
PID:323

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...