Analysis
-
max time kernel
153s -
max time network
156s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20231215-en -
resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20231215-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system -
submitted
20/12/2023, 02:15
Static task
static1
Behavioral task
behavioral1
Sample
7d042466e63f5c66187d7a982583f75d
Resource
ubuntu1804-amd64-20231215-en
3 signatures
150 seconds
General
-
Target
7d042466e63f5c66187d7a982583f75d
-
Size
25KB
-
MD5
7d042466e63f5c66187d7a982583f75d
-
SHA1
e2eef8ece1ac6f5d7653c908b597efc4ce811da7
-
SHA256
fd8f7d074875779a18d38b54bef693c57bad03294ca3e71161ac3b1d16157903
-
SHA512
0c7b66dc6a677fc907a624c77ce8cd48dd2eae3c4197c15664e51ea4abf2de66534fb769cb09fb2faa8d64aa9dc2afae8f1855c8225398b1bef88d01594f7f89
-
SSDEEP
384:Jhblb4/3Ep2W7Tle5zj6jGjiBkx+1uS2eT2iObRfYeXALrjYTHzO64:Jh54sp2W7peVYV5j2RYPjYTz
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself 1543 7d042466e63f5c66187d7a982583f75d -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 7d042466e63f5c66187d7a982583f75d File opened for modification /dev/misc/watchdog 7d042466e63f5c66187d7a982583f75d -
Writes file to system bin folder 1 TTPs 1 IoCs
description ioc Process File opened for modification /sbin/watchdog 7d042466e63f5c66187d7a982583f75d