Overview

overview

10

Static

static

10

653885b23f...57c535

debian-9-mipsel

9

Analysis

  • max time kernel
    152s
  • max time network
    156s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    19-12-2023 23:26

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    653885b23f92a739cb812c4b7457c535

  • Size

    102KB

  • MD5

    653885b23f92a739cb812c4b7457c535

  • SHA1

    f179f5926d2c3170bfcee7accc96884e66f93875

  • SHA256

    938be5dd94fa730d57b8bd7a41f07a6b3f8f87704d4c8f2afb35beb92c7a7d13

  • SHA512

    fb626c139c294aba69755762656ec6525324af794337ee7f5d8c26e42986020f96cba1fb3c5747aa66f14d34cd7d930f02b53bbb0a794d3e1d59b550f46ed8c5

  • SSDEEP

    1536:0YQRwXjPwz2WYxuV6xw/ZTXn7FP8ZhtkOOB/hYzZ/JRIOsvU4j:0YQRwXjPwz2W9VPBTXbhYzuj

Score
9/10
discovery

Malware Config

Signatures

  • Contacts a large (100684) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Reads runtime system information 20 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/653885b23f92a739cb812c4b7457c535
    /tmp/653885b23f92a739cb812c4b7457c535
    1⤵
      PID:705

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads