Analysis
-
max time kernel
150s -
max time network
154s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
08/12/2024, 00:40
General
-
Target
meerkat.mips.elf
-
Size
91KB
-
MD5
fbe5ac91a018c9223a25bcd6fae27768
-
SHA1
ac1197283b465b5c30d548e7b94f8bb1c47068f9
-
SHA256
866fc641153eebb92cc03d926a5b61e14dde88a0d1bd32bb61b1593b4a8ccdd1
-
SHA512
7f2fca0727a8d0ec8333071cedfcfcd1556430a176824f5547cefdc3fa14484a977f116fc00322d25bb938915d72d7ef3ae6ccd3c073c5627b6e5d3e1b142998
-
SSDEEP
1536:6Jv3wP53+9DQdtmhwK5jnGgBFpoWA+L1Uxep+FeM:83e3rmhLDBFpoj+L1UdFb
Score
9/10
Malware Config
Signatures
-
Contacts a large (23187) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Reads runtime system information 22 IoCs
Reads data from /proc virtual filesystem.
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/meerkat.mips.elf/tmp/meerkat.mips.elf1⤵
- Modifies Watchdog functionality
- Reads runtime system information
- System Network Configuration Discovery