Analysis
-
max time kernel
149s -
max time network
12s -
platform
debian-9_armhf -
resource
debian9-armhf-20240611-en -
resource tags
-
submitted
28-12-2024 23:17
General
-
Target
656-1-0x00008000-0x00026464-memory.dmp
-
Size
76KB
-
MD5
bf19a0931f3e83356eeb0b5fda1b7856
-
SHA1
8dc133b6e5e0db5093a1cf08da8a3786a8fd5140
-
SHA256
3766ed22d66da2ecb22400ff6c9773fce9ebadc2e9d4f739d3812e2454bceb19
-
SHA512
b118f28aeda5dda693c2740f99194bf3008a362df2bc059e3b9f570cbc02cd3667cce68ea9a4ebf51b6eefdc7547671e215e7700f643046d48ebce03cf4154e8
-
SSDEEP
1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8ob:RowpuQyNSG2eRa1styK9flTQPHo
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 2 IoCs
-
Reads runtime system information 31 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/656-1-0x00008000-0x00026464-memory.dmp/tmp/656-1-0x00008000-0x00026464-memory.dmp1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information