Analysis

  • max time kernel
    133s
  • max time network
    151s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20231215-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    20-12-2023 10:41

General

  • Target

    a4f2648638da385b4edf9aeff27f977b

  • Size

    52KB

  • MD5

    a4f2648638da385b4edf9aeff27f977b

  • SHA1

    2af17aa926bc4e1e9c98e3b49d4be89f5883f58e

  • SHA256

    124825883713187530e082ee78efd4cec80f2c6e1c6c29fb38cb5876ef1c78b3

  • SHA512

    caa6214fc0577c975c6043fa0d2253777fa0681ea2a56a67793de4a100fabc21ae4241b27ea944a973ab818df9193303b5fc82198de6ecd9f14e71e80325e601

  • SSDEEP

    768:g8G+Aty/US2qzNAEbgOD0pighGEReveWDeotMh/wzuhYf7YZotkOMZ7AsXiDKj/O:u+MiUhSmFyvDEK6CfoJZ7A9Kj/oK

Score
7/10

Malware Config

Signatures

  • Changes its process name 1 IoCs
  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 1 TTPs 1 IoCs

Processes

  • /tmp/a4f2648638da385b4edf9aeff27f977b
    /tmp/a4f2648638da385b4edf9aeff27f977b
    1⤵
    • Changes its process name
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    PID:711

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads