Analysis
-
max time kernel
147s -
max time network
136s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
-
submitted
20-12-2023 07:14
General
-
Target
8ea92b72db6d01571558fc60ff5538f6
-
Size
151KB
-
MD5
8ea92b72db6d01571558fc60ff5538f6
-
SHA1
b97c8870822bc43aef9675457235a54f13c67307
-
SHA256
9bd65d3f6b9c73230bf553cd71655d70c0542f4392c09eb39bcbedcdf83d57c8
-
SHA512
89404c681540bc10bf05e5f95e77ea306e2bd5f3c5a49747ff1ef2f039d8afd76b6ba0389967be0c4da13eab8f66c32a4804877184ccd84b029d73116aa6a5d2
-
SSDEEP
3072:dgZc9h1jlnLA2PiXYeyCcQVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZQVWDo9mrThPaLEnvP5
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/8ea92b72db6d01571558fc60ff5538f6/tmp/8ea92b72db6d01571558fc60ff5538f61⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration