Analysis
-
max time kernel
149s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231221-en -
resource tags
arch:mipsimage:debian9-mipsbe-20231221-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
21-02-2024 04:02
Behavioral task
behavioral1
Sample
c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85.elf
Resource
debian9-mipsbe-20231221-en
General
-
Target
c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85.elf
-
Size
267KB
-
MD5
08c1731fce733e612bddb9df6b361207
-
SHA1
a74f8698c41c9b0d4b245542c218a2407374dd63
-
SHA256
c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85
-
SHA512
2d75957758c02108a18a9e6e2084ae1335ba2eacaa35997155fb15c148b29c53f44a87c6676415d9afdc2082042478d89fe100bbc1b35e4ab87f467a9bdde98d
-
SSDEEP
3072:4jUJ6jNDUR3HUAJ5R9QQZ9AAbVqhlE7hMoxh1n8v1iKGAMP80bjVM:rMjR+xjpIqqhXc6v1iKGAMP80bjm
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Processes:
description ioc File opened for modification /dev/misc/watchdog File opened for modification /dev/watchdog -
Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Processes:
c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85.elfdescription ioc process File opened for modification /etc/crontab c730973fe04d8c69a73e5c63e7e757f3413d54018db69ceebd3644bfae104f85.elf -
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes:
description ioc File opened for reading /proc/699/exe