Overview

overview

10

Static

static

10

708-1-0x00...ry.dmp

debian-9-mips

7

Analysis

  • max time kernel
    150s
  • max time network
    11s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    27-12-2024 02:49

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    708-1-0x00400000-0x00451a58-memory.dmp

  • Size

    69KB

  • MD5

    959a18d59feafaaa6052258dbc0f72b9

  • SHA1

    e73d71c3bb51702cc5eb3da476ddcbdab57d030b

  • SHA256

    2a4e7f906c9d04b424108547850b5e07738df94c69ea1fd21664d57561da6edb

  • SHA512

    a381d6339216cac6e3a9a66d02e92904ec72758d005f54e0989fab9055a50cdd7797add56ed470a731aedafa0b58509d608246190c51730c41174a50ce73fe70

  • SSDEEP

    768:kZmnnogDILQHYLQHPVVMr4mgYVVMwKykNVVM6r+g/RtrVSYogDOsS5siv5XLatAN:BnN4ZH2SyOyuIq8LMEIUq+cvtpvXzoLe

Score
7/10
defense_evasiondiscovery

Malware Config

Signatures

  • Modifies Watchdog functionality 1 TTPs 2 IoCs

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Writes file to system bin folder 2 IoCs
  • Reads runtime system information 31 IoCs

    Reads data from /proc virtual filesystem.

    discovery

Processes

  • /tmp/708-1-0x00400000-0x00451a58-memory.dmp
    /tmp/708-1-0x00400000-0x00451a58-memory.dmp
    1⤵
    • Modifies Watchdog functionality
    • Writes file to system bin folder
    • Reads runtime system information
    PID:704

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads