Analysis

  • max time kernel
    153s
  • max time network
    166s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240221-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    16-12-2024 02:37

General

  • Target

    b556b41e8071e7164f880963b24c4f2ae5fe28d2b71716e410a0f17a91eb607c.elf

  • Size

    149KB

  • MD5

    bb18c503add46a96288b7a15562dbbc7

  • SHA1

    7d12569aea77474a3fa81c841d50fa0a2351f438

  • SHA256

    b556b41e8071e7164f880963b24c4f2ae5fe28d2b71716e410a0f17a91eb607c

  • SHA512

    9479a4c1784f08cfa7ee71b8d59841e81a581b3f9c0362ff8e11c6a4ccef2bf21460dafec49a770778cbb8e472fd7c000e00513e29363814bc6aa20ee34830ce

  • SSDEEP

    1536:vVq9TAdiAKPX48fLAVAeysRMt8k+V1ut48iqU7n1YF4W3bDrulmsEl0GLb:NVi/fTfLAVUsRMt8jV1utOXn1l2

Malware Config

Signatures

  • Contacts a large (19944) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Enumerates active TCP sockets 1 TTPs 1 IoCs

    Gets active TCP sockets from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

  • Reads runtime system information 25 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/b556b41e8071e7164f880963b24c4f2ae5fe28d2b71716e410a0f17a91eb607c.elf
    /tmp/b556b41e8071e7164f880963b24c4f2ae5fe28d2b71716e410a0f17a91eb607c.elf
    1⤵
    • Modifies Watchdog functionality
    • Enumerates active TCP sockets
    • Reads system network configuration
    • Reads runtime system information
    PID:743

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads