Analysis
-
max time kernel
143s -
max time network
149s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
-
submitted
02-08-2024 08:38
General
-
Target
e83939eed7a97b59d4d1d72fb8ab12bb.elf
-
Size
46KB
-
MD5
e83939eed7a97b59d4d1d72fb8ab12bb
-
SHA1
5a9ad331ba5364752987a644efd8733b44d6ca16
-
SHA256
e20846f76f42befad824f875d34ea50d5ca63fb35604960000a213166614f9c1
-
SHA512
90eca2737c4a1e0aaf75f2fc8ec0346790d1686068970adb71b70c2740a14e1a87c8440c191bb17c721e7c8c62d0b985c98da8bd5b5bb1422b472990df8414e4
-
SSDEEP
768:yg7D/8yJ3kF+OA063FHD+KQvhmRpeibHH8yc7FUldHZv/EJbYrTZOf3JFim/wXgA:ND8pF+OAxgKPpzHcyp75v/qdim4YFuAU
Score
10/10
Malware Config
Signatures
-
Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Changes its process name 1 IoCs
-
Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/e83939eed7a97b59d4d1d72fb8ab12bb.elf/tmp/e83939eed7a97b59d4d1d72fb8ab12bb.elf1⤵
- Modifies Watchdog functionality
- Changes its process name
- Reads runtime system information