Analysis
-
max time kernel
149s -
max time network
5s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
-
submitted
26-12-2024 16:57
General
-
Target
638-1-0x00008000-0x00021848-memory.dmp
-
Size
68KB
-
MD5
9b9db8876d8e526f6aac92bb057c45e2
-
SHA1
238e3395a9c29d489c892226abfa18c94fa5903a
-
SHA256
334a741fb712264341038ba8bc1926ea3695861255e4d8d49346db68260ebf1a
-
SHA512
98a7e914fe10ada2eef8ae1c7cfdbfda3fe8e26f9854e229f57cbd2c2cc9861e0934f8745e7ffff21a75d6f51138d66deea23560c3ee54cda1e522b32ad7a3b6
-
SSDEEP
1536:P3nPPrsScdVFKQrVqcbZj4mw1SATDG9CG8uggUt5eF2YnQRHOAUTvObuX:flcdVbVYzYUfgbHX
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 2 IoCs
-
Reads runtime system information 31 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/638-1-0x00008000-0x00021848-memory.dmp/tmp/638-1-0x00008000-0x00021848-memory.dmp1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information