Resubmissions
09/04/2024, 08:50
240409-krs4tsed4v09/04/2024, 08:50
240409-krshasbb2509/04/2024, 08:50
240409-krr7jabb2409/04/2024, 08:37
240409-kjmxvaeb2s1009/04/2024, 08:37
240409-kjmbbaag861009/04/2024, 08:37
240409-kjlpsaea911007/02/2024, 14:38
240207-rzqr1ahge310Analysis
- max time kernel
300s - max time network
299s - platform
ubuntu-20.04_amd64 - resource
ubuntu2004-amd64-20240221-en - resource tags
- submitted
09/04/2024, 08:37
General
- Target 4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b.elf
- Size 168KB
- Sample240409-kjlpsaea91
- SHA256 4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Creates/modifies Cron job 1 TTPs 1 IoCs
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b.elf/tmp/4470dffdf485099a7ebbe92b3e8d1db1ff14d8b2c39e3aabaa69c8122e86b91b.elf1⤵
- Creates/modifies Cron job