Analysis
-
max time kernel
132s -
max time network
150s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
10/03/2025, 02:55
Behavioral task
behavioral1
Sample
d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37.elf
Resource
debian9-mipsbe-20240611-en
3 signatures
150 seconds
General
-
Target
d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37.elf
-
Size
45KB
-
MD5
71a5e58e65367b702874f4bca763afe8
-
SHA1
c87770e9aee63c5b27b72237f141ac366d2a3720
-
SHA256
d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37
-
SHA512
ceb59ec33b5c99de91f83db3439ef4d3e2a97cea5ce737dd3bc5846f5bb6feefef928ea09c13263b833513d2760b0048392c5b0df8ebdb8f0c51dbb51db6fea9
-
SSDEEP
768:DKpIuUfh7mGZSrbvzq3maq6VH98Utf/oliKjoJdyRw15M/JfJgGlzDpbuR1Jc:+i7mGk0RT9oaiRw1+/HVJuC
Score
10/10
Malware Config
Extracted
Family
mirai
Botnet
LZRD
Signatures
-
Mirai family
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37.elf File opened for modification /dev/misc/watchdog d7a02a5ecb37d070be945fd48209caa3fa9e7a7f4976513103a8e6e3466cbe37.elf