Analysis
-
max time kernel
150s -
max time network
10s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
08/12/2024, 18:21
General
-
Target
706-1-0x00400000-0x00451a58-memory.dmp
-
Size
69KB
-
MD5
81abedded73e95b70c70d89468823835
-
SHA1
5f07ddbaef56a3582f767efdfb659b85199dc881
-
SHA256
8488cfe5ce9cf50a0e09fc49f8d7082d028f4b3757d34cdebcd597db6af40720
-
SHA512
7394855723cdf5d4de5e711c709fb61236d9889bda6ae469826c6ce9a9aa4d5cfebdba25242dcccc87cbbef85d852d598d056ca6a76bd9a4a3482952cea02609
-
SSDEEP
768:kZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatAx:BnN4ZH2SyOyuIq8LMEIUq+cvtpvXz8Le
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 2 IoCs
-
Reads runtime system information 32 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/706-1-0x00400000-0x00451a58-memory.dmp/tmp/706-1-0x00400000-0x00451a58-memory.dmp1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information