Analysis

  • max time kernel
    3s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    19-12-2023 22:48

General

  • Target

    29a62c9854fc27fac2b9f3505a285a92

  • Size

    193KB

  • MD5

    29a62c9854fc27fac2b9f3505a285a92

  • SHA1

    5b1a8591867134b60c0ea021b7c05ebe4d5126b1

  • SHA256

    ae0582b839d8e78d7f581a3ad4d3660f76afd33e2a9623b7ef37758312c937bc

  • SHA512

    47ce574e488e8e804c58031b25924c09683d6b10a6586a0ae44df01c6646926a21beb0bdb6681dbd90bb54b1dbb2bf6004cc67c050965deefff0ecca49293751

  • SSDEEP

    3072:y/NPY1KIUDN8oWlwMJmV6SE4ejBLN3lhVJtziebRHKM8VmxRfF7G:y/NPY1KIUD5AwP6GejzX/31qM8k/x

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 1 TTPs 2 IoCs

Processes

  • /tmp/29a62c9854fc27fac2b9f3505a285a92
    /tmp/29a62c9854fc27fac2b9f3505a285a92
    1⤵
    • Deletes itself
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    PID:710

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads