a432bab020dcff58e742d41df2c52053c59025eeac7f381fd4f9026f870c4ea8

Analysis

max time kernel
126s
max time network
146s
platform
debian-9_mips
resource
debian9-mipsbe-20231215-en
resource tags

arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
19/12/2023, 23:38

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6dc90e6cdaee11d804e3b1542b23897f
Size

44KB
MD5

6dc90e6cdaee11d804e3b1542b23897f
SHA1

d4f7b0594fd2f05b5f31e204e9c5ee020e224f17
SHA256

a432bab020dcff58e742d41df2c52053c59025eeac7f381fd4f9026f870c4ea8
SHA512

af8ff514216722c2e5f9f5d145029a16d8c9eae01820a349c3336ec5dab28f80decf1cb95b6f2171745b336a6565c97dbd2057a22c7c7a338b60884b194cc02d
SSDEEP

768:sP21dyUdy4FDWni/Gg1uPeNQSMBwAgGswZqkX3+JgGlzDpxYsQb+/tSz/nuVEuyy:ocwUdxDN/Gg4PeNxoyGPZqkqVrYXb+K+

Score

7^/10

Malware Config

Signatures

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	DNewAnOfpmvSZJGQPOMX	713	6dc90e6cdaee11d804e3b1542b23897f

Modifies Watchdog functionality 1 TTPs 2 IoCs

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

Impair Defenses

T1562

description	ioc
File opened for modification	/dev/watchdog
File opened for modification	/dev/misc/watchdog

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/self/exe	6dc90e6cdaee11d804e3b1542b23897f

/tmp/6dc90e6cdaee11d804e3b1542b23897f
/tmp/6dc90e6cdaee11d804e3b1542b23897f
1⤵
- Changes its process name
- Reads runtime system information
PID:713

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

T1562

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads