Overview

overview

10

Static

static

10

1528-1-0x0...ry.dmp

ubuntu-20.04-amd64

7

Analysis

  • max time kernel
    149s
  • max time network
    132s
  • platform
    ubuntu-20.04_amd64
  • resource
    ubuntu2004-amd64-20240418-en
  • resource tags

    arch:amd64arch:i386image:ubuntu2004-amd64-20240418-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system
  • submitted
    03-05-2024 02:50

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1528-1-0x0000000008048000-0x00000000080558e8-memory.dmp

  • Size

    52KB

  • MD5

    de86080c20bf2d089423fe37063dbd61

  • SHA1

    ebada8f52a76c0287a5a5a0426fa3ca0cdb4b6e0

  • SHA256

    e73631262ad5baa136ef67f9bb39ec6b47fed190d96a2d5db28017f600a08984

  • SHA512

    b17bd59e154c461c8048002dd29e281892a3d1437b5fc6e0c9098eb256e6e474c2b6f3ccb01c94d04e9fb92978be1bb1fa445d011abc3141315b35f6a32a4a7c

  • SSDEEP

    768:uGpjM9WF9ln3Hi8WX1gVHVMcV7gowbBnOvoElEb454v1wyzT0IOCP/OPVzI5vsr:uGp2kln3Hi76V1yy3K9w8DePVc50r

Score
7/10

Malware Config

Signatures

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder 1 TTPs 2 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/1528-1-0x0000000008048000-0x00000000080558e8-memory.dmp
    /tmp/1528-1-0x0000000008048000-0x00000000080558e8-memory.dmp
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:1547

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads