b43d63bac2153605adfa2e18bef3631854e62521f7e0cbee53fd8d23aeaef320

Analysis

max time kernel
137s
max time network
138s
platform
ubuntu-22.04_amd64
resource
ubuntu2204-amd64-20240522.1-en
resource tags

arch:amd64arch:i386image:ubuntu2204-amd64-20240522.1-enkernel:5.15.0-105-genericlocale:en-usos:ubuntu-22.04-amd64system
submitted
19/02/2025, 05:21

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b43d63bac2153605adfa2e18bef3631854e62521f7e0cbee53fd8d23aeaef320.elf
Size

107KB
MD5

89237fc2562becf3d68d120d9fecf9c2
SHA1

7ebde82f839a297dcd1783bb709bf58e0c481eb7
SHA256

b43d63bac2153605adfa2e18bef3631854e62521f7e0cbee53fd8d23aeaef320
SHA512

3172921bb78110597fb4e77162c1d823b736a330cac813f1932812708af9e85556c78b8c00b11b68206422ada974185a0f2545e104fbefe77cb49e93be3fea85
SSDEEP

3072:ZFHv0mqU75U5Cl+eextNko4G3Ajgs6F0m5qbyCYXmh:ZZ0B25CCRexkfG3AjgvGm5qbyRXmh

Score

7^/10

defense_evasion

Malware Config

Signatures

Modifies Watchdog functionality 1 TTPs 2 IoCs

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

defense_evasion

Impair Defenses

T1562

description	ioc
File opened for modification	/dev/watchdog
File opened for modification	/dev/misc/watchdog

Changes its process name 1 IoCs

description	pid
Changes the process name, possibly in an attempt to hide itself	1558

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

T1562

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads