Analysis
-
max time kernel
150s -
max time network
9s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
-
submitted
09-01-2025 21:50
General
-
Target
737-1-0x00400000-0x00455ac8-memory.dmp
-
Size
85KB
-
MD5
f80e2386c459fcaca4c3bb482d37597d
-
SHA1
608f6de35369bc94b471a91fb6ca13e689aeca3e
-
SHA256
7100d35eacf9804321c3b8fe95720330d4e942c86187fbcc3ace266505b2e8c5
-
SHA512
a6b7cb9109852a10f0521c94ae1321f8e35196a45ec9566bf50994f998471ce6c9a464df4018340ff00988568f29c7c13ec8d0c7607f1e016ec92271e462171f
-
SSDEEP
1536:K9yr1qbFxLTtDsK7r6wPR+t3x6pHGa+2FZg/0A867:Kyr1qbFxLTtDsK66R+tH2FFo
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder 2 IoCs
-
Reads runtime system information 13 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/737-1-0x00400000-0x00455ac8-memory.dmp/tmp/737-1-0x00400000-0x00455ac8-memory.dmp1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information