d0d2ca0cd067218352efdf58e5269dfd6d1f99593a46671d85e1a974f4dc2a2d | Triage

Analysis

max time kernel
0s
max time network
127s
platform
debian-9_armhf
resource
debian9-armhf-20221111-en
resource tags

arch:armhfimage:debian9-armhf-20221111-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
submitted
03-04-2023 12:41

Sharing

Report Analysis Logs

General

Target

04f0ce5e604167b2833059ebf606d7f7.elf
Size

136KB
MD5

04f0ce5e604167b2833059ebf606d7f7
SHA1

1f5307cdd669332c3fbd694e68dc336de3b3fbf3
SHA256

d0d2ca0cd067218352efdf58e5269dfd6d1f99593a46671d85e1a974f4dc2a2d
SHA512

74641df4ae309e85eeda097ae6a233cf76e58723566a540b9d36bfcde4148b7428b9171d9b98929d6bf70663a3e0798d879f0d29794924c8744e2e58bbe706ee
SSDEEP

3072:Sdf+fvEqa9FazYA7IboRhVe391CErktmCQA9FX9aH:ifWEqa9FaNhVe3DrktmCQA9Z9aH

Score

9^/10

Malware Config

Signatures

Modifies the Watchdog daemon 1 TTPs
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

Impair Defenses
T1562

/tmp/04f0ce5e604167b2833059ebf606d7f7.elf
/tmp/04f0ce5e604167b2833059ebf606d7f7.elf
1⤵
PID:348

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...