Analysis
-
max time kernel
150s -
max time network
153s -
platform
debian-9_armhf -
resource
debian9-armhf-20231215-en -
resource tags
-
submitted
21-02-2024 03:29
General
-
Target
5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b.elf
-
Size
215KB
-
MD5
837b48f5b175f1a10260c4de8fef167f
-
SHA1
7699f4a1d796bc0be18659b8d72727f9678b2098
-
SHA256
5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b
-
SHA512
c2de432b3a7a2dda7bd1de859997cc4fae685fdd2588a0b676a808aabc0ace64b18cf6a32bed4022fd99f04e08fd406eabd90e6b788c5ef018dfe38cd0192081
-
SSDEEP
6144:idJaAuDXmGYkKnpfPHM+MrtqvgBE6OCTI6c3m:idJaAmBdUPUr4vgBE6OCTI6Wm
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b.elf/tmp/5da192c643532f4221618f21a699227f2b921ab4059f4fc91ddb2d3eb08c9a7b.elf1⤵
- Creates/modifies Cron job