Analysis
- max time kernel
149s - max time network
152s - platform
debian-9_mipsel - resource
debian9-mipsel-20240611-en - resource tags
- submitted
14/11/2024, 01:00
General
- Target dedb091ebd4b77f40694fe37f58b72b8347e8ea06f6c4b10d741db28230a2cd9.elf
- Size 106KB
- Sample241114-bc5dwascpe
- SHA256 dedb091ebd4b77f40694fe37f58b72b8347e8ea06f6c4b10d741db28230a2cd9
Score
9/10
Malware Config
Signatures
- Contacts a large (23504) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Reads runtime system information 16 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/dedb091ebd4b77f40694fe37f58b72b8347e8ea06f6c4b10d741db28230a2cd9.elf/tmp/dedb091ebd4b77f40694fe37f58b72b8347e8ea06f6c4b10d741db28230a2cd9.elf1⤵
- Modifies Watchdog functionality
- Reads runtime system information