Analysis
-
max time kernel
129s -
max time network
133s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
07-12-2024 02:50
Behavioral task
behavioral1
Sample
7402ed7191a0e117e488ddf812caa0a96896c9d3ba6934c106f3af8d66767995.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
2 signatures
150 seconds
General
-
Target
7402ed7191a0e117e488ddf812caa0a96896c9d3ba6934c106f3af8d66767995.elf
-
Size
148KB
-
MD5
46cbc029673bbee94214d310d52e5944
-
SHA1
411726306a0f0ad673e0b20d9896679d20048bcb
-
SHA256
7402ed7191a0e117e488ddf812caa0a96896c9d3ba6934c106f3af8d66767995
-
SHA512
915643c7256f1c12dce3797b3e258f02bc5b131516276b26e6c86d0a585fd1e4cbd39fcc674c828581689fc89a3ca11a29c2fb723fe4e55174d5231703a836f2
-
SSDEEP
1536:bVeTpqCVvWRYx0O9vPBysZgvsgxqAz/0ufMytV8pLtaoLAImlP+s4zWfOodW:byvWmBx+sK/PflCgImlWs4zWfOodW
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog 7402ed7191a0e117e488ddf812caa0a96896c9d3ba6934c106f3af8d66767995.elf File opened for modification /dev/misc/watchdog 7402ed7191a0e117e488ddf812caa0a96896c9d3ba6934c106f3af8d66767995.elf -
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 696 7402ed7191a0e117e488ddf812caa0a96896c9d3ba6934c106f3af8d66767995.elf