Analysis
-
max time kernel
153s -
max time network
103s -
platform
linux_amd64 -
resource
ubuntu1804-amd64-en-20211208 -
resource tags
-
submitted
06-07-2023 11:11
General
-
Target
599-1-0x0000000008048000-0x00000000080547a0-memory.dmp
-
Size
48KB
-
MD5
1899ee9a2ba2f6a1cee1c07bd78a75ac
-
SHA1
b33b9a02c847983f943cf8256b3f8732f846ce2f
-
SHA256
266f62580cc284b787cbc08c6627660aeae37525a1f38dc2a55d1096d81079b4
-
SHA512
41142fe2937716fd2ba9a59d576c5ce0f0a124f87bc2361a8f8734b4c24350210768f4852d53feeaf087d5bea7636dadaf15d4a8e00e1cf88dee2fc1af10ff3f
-
SSDEEP
1536:6nJRT4QPfZfW5XTOeY3Dve3AGX57/4Qw7bn2iZeA:Gv4QPfZfW5XTOeoEzJ7AQwf2i3
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 15 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/599-1-0x0000000008048000-0x00000000080547a0-memory.dmp/tmp/599-1-0x0000000008048000-0x00000000080547a0-memory.dmp1⤵