50dad45e91f61043118a822c13316171108c676db874ab5cfc77f149a41eba9f | Triage

Resubmissions

13-01-2025 14:19

250113-rm7vravmez 1

13-01-2025 14:07

250113-re1fpsvkc1 10

09-01-2025 06:07

250109-gva6mstldl 7

Sharing

General

Target

watchdog.elf
Size

309KB
Sample

250109-gva6mstldl
MD5

f124e8a9e771966e3846a638be333e8d
SHA1

07a3ee5d11f8c31f650de519edaa18a4c7548a9d
SHA256

50dad45e91f61043118a822c13316171108c676db874ab5cfc77f149a41eba9f
SHA512

a7dacb77f171b4a5f475b6523dd0f6a4da009291f4a10c35cf206bfd4d31e1a605d1266ce0d885515f5e50df7aba8dbac8975c3efb0adf0e5209c4fbf7f51131
SSDEEP

6144:uyKTXNPSWNKzpsMQspTeOKPsYekmRtwqNHexsYKlJ6dQC4yV6OEfXOd:cdSD+haTbKUMmRqqNHexsYKlJ6dQCvcj

Score

7^/10

discovery execution linux persistence privilege_escalatio

Malware Config

Targets

- Target
  
  watchdog.elf
- Size
  
  309KB
- MD5
  
  f124e8a9e771966e3846a638be333e8d
- SHA1
  
  07a3ee5d11f8c31f650de519edaa18a4c7548a9d
- SHA256
  
  50dad45e91f61043118a822c13316171108c676db874ab5cfc77f149a41eba9f
- SHA512
  
  a7dacb77f171b4a5f475b6523dd0f6a4da009291f4a10c35cf206bfd4d31e1a605d1266ce0d885515f5e50df7aba8dbac8975c3efb0adf0e5209c4fbf7f51131
- SSDEEP
  
  6144:uyKTXNPSWNKzpsMQspTeOKPsYekmRtwqNHexsYKlJ6dQC4yV6OEfXOd:cdSD+haTbKUMmRqqNHexsYKlJ6dQCvcj
Score

7^/10

discovery execution persistence privilege_escalatio
- Deletes itself
- Executes dropped EXE
- Creates/modifies Cron job
  Cron allows running tasks on a schedule, and is commonly used for malware persistence.
  execution persistence privilege_escalatio
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Scheduled Task/Job

Cron

Persistence

Scheduled Task/Job

Cron

Privilege Escalation

Scheduled Task/Job

Cron

Defense Evasion

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionpersistenceprivilege_escalatio