Analysis
-
max time kernel
3s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19-12-2023 22:48
Behavioral task
behavioral1
Sample
29a62c9854fc27fac2b9f3505a285a92
Resource
debian9-mipsel-20231215-en
debian-9-mipsel
3 signatures
150 seconds
General
-
Target
29a62c9854fc27fac2b9f3505a285a92
-
Size
193KB
-
MD5
29a62c9854fc27fac2b9f3505a285a92
-
SHA1
5b1a8591867134b60c0ea021b7c05ebe4d5126b1
-
SHA256
ae0582b839d8e78d7f581a3ad4d3660f76afd33e2a9623b7ef37758312c937bc
-
SHA512
47ce574e488e8e804c58031b25924c09683d6b10a6586a0ae44df01c6646926a21beb0bdb6681dbd90bb54b1dbb2bf6004cc67c050965deefff0ecca49293751
-
SSDEEP
3072:y/NPY1KIUDN8oWlwMJmV6SE4ejBLN3lhVJtziebRHKM8VmxRfF7G:y/NPY1KIUD5AwP6GejzX/31qM8k/x
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 710 29a62c9854fc27fac2b9f3505a285a92 -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 29a62c9854fc27fac2b9f3505a285a92 File opened for modification /dev/misc/watchdog 29a62c9854fc27fac2b9f3505a285a92 -
Writes file to system bin folder 1 TTPs 2 IoCs
description ioc Process File opened for modification /sbin/watchdog 29a62c9854fc27fac2b9f3505a285a92 File opened for modification /bin/watchdog 29a62c9854fc27fac2b9f3505a285a92