Analysis
-
max time kernel
149s -
max time network
6s -
platform
debian-9_armhf -
resource
debian9-armhf-20240418-en -
resource tags
-
submitted
19-01-2025 18:22
General
-
Target
657-1-0x00008000-0x00023668-memory.dmp
-
Size
76KB
-
MD5
9d059ebce15e6298efcbe69eb7df91d6
-
SHA1
2fb74976882c3ec80f3e87334d300a8badc48eb8
-
SHA256
b5f5c52e8335788f16ddd39f437ecb40bb701bc607c815e640c3b65398066b60
-
SHA512
6b50ea476fd4cb3ae56157ad61eb7d69e16a2c79d69322cc6296e92433fd8e5f16bbfd86f82e8a1798cae17a51878faac43efac751aa4f81cf7bd0b2b995bdbb
-
SSDEEP
1536:yCr8byuX0r/N2v/K4Fp/xPW8z8yjJzVx3IYVMH:yCr8byu3KU/zDZMH
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 2 IoCs
-
Reads runtime system information 32 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/657-1-0x00008000-0x00023668-memory.dmp/tmp/657-1-0x00008000-0x00023668-memory.dmp1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information