Analysis

  • max time kernel
    139s
  • max time network
    162s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240221-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    13/10/2024, 19:49

General

  • Target

    9ff2daaf1375355d4829ad206ac92e2c.elf

  • Size

    43KB

  • MD5

    9ff2daaf1375355d4829ad206ac92e2c

  • SHA1

    b7266d77daaaeef014e72d7312793939d07394c5

  • SHA256

    241c94a3458c65a9bf658fa6ab5b21bb74547a1e01bff35bfe8311c85c5f3ce8

  • SHA512

    28e57b59ee60a8ef803c9e9219af70bde59a48bc92c73f55aa1b239e4e427bb1700b75d1820e524da4c5ec0259bba42dd2d32116693ad9609f00552702a3172a

  • SSDEEP

    768:UYQdzLFMbXkqyyxwmGFm3qsSPhkj96MiKrecs6cDtyO5XnQDWFS7C5W8:UHPmwqBOc31LNrecs6KtPXQDLe3

Malware Config

Signatures

  • Mirai

    Mirai is a prevalent Linux malware infecting exposed network devices.

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder 2 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/9ff2daaf1375355d4829ad206ac92e2c.elf
    /tmp/9ff2daaf1375355d4829ad206ac92e2c.elf
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:743

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads