Analysis
-
max time kernel
149s -
max time network
6s -
platform
debian-9_armhf -
resource
debian9-armhf-20240729-en -
resource tags
-
submitted
25/01/2025, 16:06 UTC
General
-
Target
696-1-0x00008000-0x00026464-memory.dmp
-
Size
76KB
-
MD5
44f0f33e5ff7d4cfc29463365b2ddf1b
-
SHA1
c8ea16189e184d28f9c53e924df26d9b5c2c3300
-
SHA256
54466136e273ab4a83959861735982ca9265a81f03ec54783903dd276e6b5f72
-
SHA512
f5be6d8efada1928e3ca166b350cb6cf813f67956762e9f3cbca87c89183af09431e1e02db7a84f0fbb1bb7eb2b16e742386cc3f30e747fd769941d2b88805ba
-
SSDEEP
1536:TJnF9sFw8gu6+wyKaw1KpIPrbvr/6Ra1styKtI8ll5BihwlTQP+8o6:RowpuQyNSG2eRa1styK9flTQPHo
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder 2 IoCs
-
Reads runtime system information 33 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/696-1-0x00008000-0x00026464-memory.dmp/tmp/696-1-0x00008000-0x00026464-memory.dmp1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Reads runtime system information
Network
- No results found
-
154.62.226.5:3778
No results found