Analysis
-
max time kernel
150s -
max time network
148s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20230831-en -
resource tags
-
submitted
02/09/2023, 20:30
General
-
Target
324-1-0x00400000-0x00452a58-memory.dmp
-
Size
73KB
-
MD5
610d1ca02bee66215cfb8207bfd23b92
-
SHA1
e63419a2cf5aa59e68c558a23b6a52954524c204
-
SHA256
ce2912696ba5685c69c08713ea25ace0d00e1d80cd51e54c8f3b77d92fb1bb4d
-
SHA512
d5b61240524f3960f2a599c0ba533c301330645ae43e311414037f88d6d74cbf6293916469663def55f4a31b8e3873eca7b229845c859c36dcafab2110b4936a
-
SSDEEP
1536:oJPEBmW5iNWqcGTrwnXHZ84OqdZerESt5P:oJPEB8NWq9Qqqd0h
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/324-1-0x00400000-0x00452a58-memory.dmp/tmp/324-1-0x00400000-0x00452a58-memory.dmp1⤵