b3088592e76ee79e6ac44d3c63c8b625f7078dcca0fe4db971685baed90bd45b

Analysis

max time kernel
0s
platform
debian-12_mipsel
resource
debian12-mipsel-20240729-en
resource tags

arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
13-01-2025 04:26

Sharing

Copy URL

Twitter E-mail

Reason

Reading agent response: unexpected EOF

Report Analysis Logs

General

Target

byte.mpsl.elf
Size

106KB
MD5

1f564b30f022bdd9ee2bd99a63179697
SHA1

00ab81cb29ab37431c9625dd78a297d4a43507c0
SHA256

b3088592e76ee79e6ac44d3c63c8b625f7078dcca0fe4db971685baed90bd45b
SHA512

ef75496422446fdfefe157f9714aa3a4134c29413699818c1f5c81dfd4ee5395865f6b2130a3cf916eccf8967b6029fc58bee66e7bd538abb8849f5ec736289c
SSDEEP

1536:EiuIJqfyQd84OB/Qc857JAZ559xWcfZcKalcMbl61d6kGGflDa:/ugqfyQdtu59jfpo4HGO1a

Score

7^/10

defense_evasion

Malware Config

Signatures

Modifies Watchdog functionality 1 TTPs 2 IoCs

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

defense_evasion

Impair Defenses

T1562

description	ioc	Process
File opened for modification	/dev/watchdog	byte.mpsl.elf
File opened for modification	/dev/misc/watchdog	byte.mpsl.elf

/tmp/byte.mpsl.elf
/tmp/byte.mpsl.elf
1⤵
- Modifies Watchdog functionality
PID:743

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

T1562

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads