Overview

overview

10

Static

static

10

697-1-0x00...ry.dmp

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    697-1-0x00400000-0x0043cffc-memory.dmp

  • Size

    177KB

  • Sample

    241227-c75hsszpet

  • MD5

    dfb963191e6e947d67432c1e0b9fc202

  • SHA1

    c9e2554c64e23d3a4f39bec799c2888765919b08

  • SHA256

    97c12a224b0b52dbe3701a74d35896606050b495936131df0efdee3f383ecb73

  • SHA512

    e2144bf79fbd90c87fe73b10a2fa315a38c4c2fab532ada4d650e357f7d2aebef6806dd7e8a5efc3c2478979a08cc73f90524f899baee49beb91723060aefc5c

  • SSDEEP

    3072:+DWRZRX74OslR4vkHgrU4690NkX83Dza7nnYSf1BuBWxJUtFb1liWKAfF:+qRXL4OslRykHgrU7B8X+nDuBWxcFb1H

Score
10/10
miraidefense_evasiondiscovery

Malware Config

Targets

    • Target

      697-1-0x00400000-0x0043cffc-memory.dmp

    • Size

      177KB

    • MD5

      dfb963191e6e947d67432c1e0b9fc202

    • SHA1

      c9e2554c64e23d3a4f39bec799c2888765919b08

    • SHA256

      97c12a224b0b52dbe3701a74d35896606050b495936131df0efdee3f383ecb73

    • SHA512

      e2144bf79fbd90c87fe73b10a2fa315a38c4c2fab532ada4d650e357f7d2aebef6806dd7e8a5efc3c2478979a08cc73f90524f899baee49beb91723060aefc5c

    • SSDEEP

      3072:+DWRZRX74OslR4vkHgrU4690NkX83Dza7nnYSf1BuBWxJUtFb1liWKAfF:+qRXL4OslRykHgrU7B8X+nDuBWxcFb1H

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks