Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20231221-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20231221-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    21-02-2024 04:02

General

  • Target

    c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85.elf

  • Size

    267KB

  • MD5

    08c1731fce733e612bddb9df6b361207

  • SHA1

    a74f8698c41c9b0d4b245542c218a2407374dd63

  • SHA256

    c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85

  • SHA512

    2d75957758c02108a18a9e6e2084ae1335ba2eacaa35997155fb15c148b29c53f44a87c6676415d9afdc2082042478d89fe100bbc1b35e4ab87f467a9bdde98d

  • SSDEEP

    3072:4jUJ6jNDUR3HUAJ5R9QQZ9AAbVqhlE7hMoxh1n8v1iKGAMP80bjVM:rMjR+xjpIqqhXc6v1iKGAMP80bjm

Score
7/10

Malware Config

Signatures

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Creates/modifies Cron job 1 TTPs 1 IoCs

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85.elf
    /tmp/c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85.elf
    1⤵
    • Creates/modifies Cron job
    PID:696

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads