Analysis
-
max time kernel
147s -
max time network
148s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
-
submitted
28-11-2024 17:43
General
-
Target
mipsel.elf
-
Size
151KB
-
MD5
86ea06ad218a6ca4e51395ef27e41e6c
-
SHA1
e896de83f0182465a978d5dd1b98db026da681dc
-
SHA256
19897b721dc0c6dd554f3e97fe2e8792a18c0511ec0f447e9510a01b49aead16
-
SHA512
1c7396c6277613500977cc9980b4194cc8aeed7fccaee988578b3e808a5978d9aa2ea40e96ec1fd9da6b0929e22c30e925bb18a2d07ca11d8cce56c7df0782ee
-
SSDEEP
3072:dgZc9h1jlnLA2PiXYeyCcrVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZrVWDo9mrThPaLEnvP5
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Changes its process name 1 IoCs
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/mipsel.elf/tmp/mipsel.elf1⤵
- Modifies Watchdog functionality
- Reads system routing table
- Changes its process name
- Reads system network configuration
- System Network Configuration Discovery