Analysis
-
max time kernel
147s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
14/10/2024, 09:28
Behavioral task
behavioral1
Sample
026f74e7949f2803d79b733a33b53f8b1d7c65794cf1ef3a0ab841672ce5950a.elf
Resource
debian9-mipsbe-20240418-en
2 signatures
150 seconds
General
-
Target
026f74e7949f2803d79b733a33b53f8b1d7c65794cf1ef3a0ab841672ce5950a.elf
-
Size
93KB
-
MD5
70ba66aeadca7ab3cb704010bbb9f3ca
-
SHA1
9068cfebe5868636939516a06975bb6fe9e0d5c0
-
SHA256
026f74e7949f2803d79b733a33b53f8b1d7c65794cf1ef3a0ab841672ce5950a
-
SHA512
62ee51f7905ff13525768cda9448e6aef7ad77059f15c66c4a18cf2911e513eff6764843d03561522b35a63e5f4b9af9be89d8171f90566f24638ad657588a5f
-
SSDEEP
1536:HW3OFeF2LED/vAYw5cPB7n6pT2/V8rGWCrNkEWna+l1wAeolJxATiSb:H8OFeF2Od37n6N2/SGHHEATZ
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 710 026f74e7949f2803d79b733a33b53f8b1d7c65794cf1ef3a0ab841672ce5950a.elf -
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 026f74e7949f2803d79b733a33b53f8b1d7c65794cf1ef3a0ab841672ce5950a.elf File opened for modification /dev/misc/watchdog 026f74e7949f2803d79b733a33b53f8b1d7c65794cf1ef3a0ab841672ce5950a.elf