Analysis
-
max time kernel
1s -
max time network
3s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
-
submitted
12-03-2024 03:18
General
-
Target
e7dd2d739e76f27838ce6e19963253ff9fcca44552d3bd410f81ae52d7a42196.elf
-
Size
123KB
-
MD5
017b45e7f845061d1cbaf89bc73b4c54
-
SHA1
fe4b45007fd92b7830313b2be4661e45f11165e1
-
SHA256
e7dd2d739e76f27838ce6e19963253ff9fcca44552d3bd410f81ae52d7a42196
-
SHA512
8e90799f44fd934912720b1395d48ec6616c303970f15a0fe1590c3f18e67840eb27aec5b9ec99fa781f93fd4ec3ec7940b12901dfe0a175d10f19b2344fa20d
-
SSDEEP
1536:CNUWdLp8DqkQsW0Ib7uea9W6RiIRNUu80OXlrKp7QDCeZ4IkkbN6A65b:CNNp82kQsW0Ib6ea93hc5KpXel0Ai
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
-
Writes file to system bin folder 1 TTPs 2 IoCs
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/e7dd2d739e76f27838ce6e19963253ff9fcca44552d3bd410f81ae52d7a42196.elf/tmp/e7dd2d739e76f27838ce6e19963253ff9fcca44552d3bd410f81ae52d7a42196.elf1⤵
- Changes its process name