Analysis
-
max time kernel
148s -
max time network
147s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231215-en -
resource tags
-
submitted
19/12/2023, 10:33
General
-
Target
07f5bc60130cc2c913275dcdfebe7359
-
Size
151KB
-
MD5
07f5bc60130cc2c913275dcdfebe7359
-
SHA1
a7dabbca6a8ef3ad478c2cb317765277dcbfdf14
-
SHA256
fab2a3994594601d9587fd301d5e1902967ca7ebc1b508dd143fb6191200e7bd
-
SHA512
7e3a73dc1814b3b906f19a0f2cae3104ebb3b7fa6e8e39feaec24b6284c79950d4bac7d78f84e31d8463c3fb43f8f2ac048dd024f67773bce4317f7d20c75c73
-
SSDEEP
3072:JW6dm9tS1aRGQdK76t/zCxI5mrThPaLEnvPrN+:c6IG+LC2mrThPaLEnvPrN+
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/07f5bc60130cc2c913275dcdfebe7359/tmp/07f5bc60130cc2c913275dcdfebe73591⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration