Analysis
-
max time kernel
0s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240729-en -
resource tags
arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
14-12-2024 02:05
Behavioral task
behavioral1
Sample
07436ba06220ede5338f7f770e7c6a660f11e3bbebba6c92d5988d5f512b4983.elf
Resource
debian12-mipsel-20240729-en
debian-12-mipsel
2 signatures
150 seconds
Errors
Reason
Reading agent response: unexpected EOF
General
-
Target
07436ba06220ede5338f7f770e7c6a660f11e3bbebba6c92d5988d5f512b4983.elf
-
Size
118KB
-
MD5
034bae419c844c89b42d2b39200d15ca
-
SHA1
3cfaf658fc0bf57fd431c430693cff7a342781bc
-
SHA256
07436ba06220ede5338f7f770e7c6a660f11e3bbebba6c92d5988d5f512b4983
-
SHA512
a08cc0ec6b0012dd5b816b0ea12773b289a80ed8322751c855d71b9aa397f8193c0db3f1b193e92f1ac80b23a6dc02ddbfa9d730cb220e23fa54534653ab0083
-
SSDEEP
1536:BGmnLpEKrHc9o8uGC9KF86e//F7ogl/f4ZLpL35FstAPeemQSl61d6vZgum:RLuKrHc3Cd5ln4vRaQS44Zg
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/misc/watchdog 07436ba06220ede5338f7f770e7c6a660f11e3bbebba6c92d5988d5f512b4983.elf File opened for modification /dev/watchdog 07436ba06220ede5338f7f770e7c6a660f11e3bbebba6c92d5988d5f512b4983.elf -
description ioc Process File opened for reading /proc/1/net/tcp 07436ba06220ede5338f7f770e7c6a660f11e3bbebba6c92d5988d5f512b4983.elf