Analysis

  • max time kernel
    149s
  • max time network
    7s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    26-12-2024 16:59

General

  • Target

    717-1-0x00400000-0x0042ce64-memory.dmp

  • Size

    113KB

  • MD5

    bd0d08d03aa4b546359f06a2a466a226

  • SHA1

    f062cd9d7ae886a22facfc1468f343fab0b22883

  • SHA256

    395c069f3261763bb3b84b05dfdff88707337d9d56a8170e3487c5b5eec10545

  • SHA512

    e4d890f12ec986d3bf7ebeb3104600ec43e5aed04a3387f9e1b615d2ee6e87ef4bdf73ac8eb36b174b2e46896c1489222ae00f1579e0bca3b43117eb70a2e688

  • SSDEEP

    3072:OrCjaLg3IbSU07blgrUPu/NRDVFR7VmcFRUFb1lKWxa:OrCjas3ImU07blgrUO2Fb1lKWxa

Malware Config

Signatures

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

  • Writes file to system bin folder 2 IoCs
  • Reads runtime system information 25 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/717-1-0x00400000-0x0042ce64-memory.dmp
    /tmp/717-1-0x00400000-0x0042ce64-memory.dmp
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:708

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads