Analysis
-
max time kernel
81s -
max time network
151s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
resource tags
arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
18-05-2023 13:38
General
-
Target
07ed6b95a27365489e62e0a7b1ccebdc.elf
-
Size
24KB
-
MD5
07ed6b95a27365489e62e0a7b1ccebdc
-
SHA1
4899527e97855ace6859934113fb5146733b48e8
-
SHA256
4ca3f25d2820798aba9d7d7c19aec54277c5a61bca3fc0c348939ec7ffb6e86d
-
SHA512
8911b6eab8465b9cfee78f16c2d439c21c210e22407f3554044ce287796736c21f672ad385048913782919fb913dc8bb1978cfef5eba3de49f6b467c4cc6517b
-
SSDEEP
768:obrQlS07dEv0UXqUhvQE+CXQKMQKCXBpaZqSWvm:4QlS07FUXqIYSXQKquuqu
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Processes:
description ioc File opened for modification /dev/watchdog File opened for modification /dev/misc/watchdog -
Writes file to system bin folder 1 TTPs 2 IoCs
Processes:
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog