Analysis
-
max time kernel
150s -
max time network
139s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231215-en -
resource tags
-
submitted
20-12-2023 10:41
General
-
Target
a52ab4c6daec5afa82defcc19fe61bd6
-
Size
158KB
-
MD5
a52ab4c6daec5afa82defcc19fe61bd6
-
SHA1
c24a45ab0d6b5ad67b5b9fbf784d054ab712bb21
-
SHA256
214f776d6db3546c7189b602799ab631e9414807852c197939049fc74b746ced
-
SHA512
bba37ca7db076d40347d36dfee161bd43397efba7e78af68e995156990f109d3728aef4dfa1e3a3be0e887d75a6755f1b4cd3219595564756c16ac14cde456bb
-
SSDEEP
3072:8C1KZ66gck5YpPt2njTgcNJvTPy0hkdJmzkDLeTeWDEi+w9Ng:DKZ7QjTlLxhkd4zkDLeTeWDEi+w9Ng
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/a52ab4c6daec5afa82defcc19fe61bd6/tmp/a52ab4c6daec5afa82defcc19fe61bd61⤵
- Changes its process name
- Reads system routing table
- Reads system network configuration