Analysis
-
max time kernel
137s -
max time network
155s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
20/12/2023, 02:11
Static task
static1
Behavioral task
behavioral1
Sample
7ccd91eb1e2e56dde3d1072c8ae200c4
Resource
ubuntu1804-amd64-20231215-en
3 signatures
150 seconds
General
-
Target
7ccd91eb1e2e56dde3d1072c8ae200c4
-
Size
25KB
-
MD5
7ccd91eb1e2e56dde3d1072c8ae200c4
-
SHA1
2868d36dafb1de6a242af5734f28117c1e63ccd4
-
SHA256
0251e999bee062ff92f2f878c82376a30a78147c5660be3cdc5d7e343658c533
-
SHA512
12a67e3bdb055df3362bf56969967fe4afb62dc96d88a4385459b47cdebe0d6422d55d4d79bf806219e29215f582cfdf3dc8f3d8f6f540e64d4b476f180f1ef9
-
SSDEEP
384:5hb/awHIhMbper6jPIjHQ4lR+FuSkWSePtiteXNLLzjrPDOUIqrr:5h+rMbperM9T5kWkQPzjTDe
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself 1562 7ccd91eb1e2e56dde3d1072c8ae200c4 -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 7ccd91eb1e2e56dde3d1072c8ae200c4 File opened for modification /dev/misc/watchdog 7ccd91eb1e2e56dde3d1072c8ae200c4 -
Writes file to system bin folder 1 TTPs 1 IoCs
description ioc Process File opened for modification /sbin/watchdog 7ccd91eb1e2e56dde3d1072c8ae200c4