Overview

overview

10

Static

static

10

709-1-0x00...ry.dmp

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    709-1-0x00400000-0x0043cffc-memory.dmp

  • Size

    177KB

  • Sample

    241227-rhdfcawmfn

  • MD5

    fe44c8132011674f58c167ce3e3a86b8

  • SHA1

    e14615464c7ad1760809a4add34b0967a35a04df

  • SHA256

    306e35f27b853d5dab6ea933335297a2b7a136f8f81ed02dcc37e91e9206acb4

  • SHA512

    a3f5cc709016258dc938b088ec459bc311d508242ea0816a3fbaf2c810629bc52dd44be293ec3ff578a5168f40d29cd49c598d6619133aa31b769b1b5fe3e9ab

  • SSDEEP

    3072:+DWRZRX74OslR4vkHgrU4690NkX83Dza7nnYSf1BuBWxJUtFb1liWKXfF:+qRXL4OslRykHgrU7B8X+nDuBWxcFb1+

Score
10/10
miraidefense_evasiondiscovery

Malware Config

Targets

    • Target

      709-1-0x00400000-0x0043cffc-memory.dmp

    • Size

      177KB

    • MD5

      fe44c8132011674f58c167ce3e3a86b8

    • SHA1

      e14615464c7ad1760809a4add34b0967a35a04df

    • SHA256

      306e35f27b853d5dab6ea933335297a2b7a136f8f81ed02dcc37e91e9206acb4

    • SHA512

      a3f5cc709016258dc938b088ec459bc311d508242ea0816a3fbaf2c810629bc52dd44be293ec3ff578a5168f40d29cd49c598d6619133aa31b769b1b5fe3e9ab

    • SSDEEP

      3072:+DWRZRX74OslR4vkHgrU4690NkX83Dza7nnYSf1BuBWxJUtFb1liWKXfF:+qRXL4OslRykHgrU7B8X+nDuBWxcFb1+

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks