Analysis
-
max time kernel
146s -
max time network
138s -
platform
ubuntu-18.04_amd64 -
resource
ubuntu1804-amd64-20240508-en -
resource tags
-
submitted
24-11-2024 08:14
General
-
Target
x86.elf
-
Size
213KB
-
MD5
d3194a1edfdb612594a2e16fec921089
-
SHA1
2f56ec6ba4f3ee5f796f3c336c0bcadd19d6f970
-
SHA256
73b2b6ec94ae260cfeca07d26370ab028f731c534265bb73414382598bd1975b
-
SHA512
0a367c7f6d1c414830177f62098cc688d12d2f8d78f54916b8a1589e32cbec42792be1bf6c6fa5a41d6bc1234017c03f2e8908ac39d76e72749726d756b63614
-
SSDEEP
6144:kdRvYEKvfTnY4s2sTSHSLmDoXSC9+TqVCi00:kuTi2vVDoXSC9+TqVC30
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Writes file to system bin folder 2 IoCs
-
Changes its process name 1 IoCs
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/x86.elf/tmp/x86.elf1⤵
- Modifies Watchdog functionality
- Reads system routing table
- Writes file to system bin folder
- Changes its process name
- Reads system network configuration