Analysis
-
max time kernel
152s -
max time network
144s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20230831-en -
resource tags
-
submitted
19/09/2023, 09:58
General
-
Target
599-1-0x0000000008048000-0x00000000080547a0-memory.dmp
-
Size
48KB
-
MD5
b68504ee17ea8446cc203f292401380e
-
SHA1
a6bf6fa355dc3eb9ec526be6d3c1ee870f8920e6
-
SHA256
7fb7b0cb2109520ab3e4323d524a147ab67ec92cd9ad034b5672a24f87e4b766
-
SHA512
f38b0261ffee93f10326c8c72de9bf241996ab4f397479ca61b9f0b74da253f8f973f5fb6917191f7044f41dd9d3c10643794927eb1058f0604f3019f407594a
-
SSDEEP
1536:6nJRT4QPfZfW5XTOeY3Dve3AGAZq/4Qw7bn2iKeA:Gv4QPfZfW5XTOeoEz0qAQwf2iC
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 14 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/599-1-0x0000000008048000-0x00000000080547a0-memory.dmp/tmp/599-1-0x0000000008048000-0x00000000080547a0-memory.dmp1⤵