a5ae9ca612e870cac00cb4ffdf7f4c5d65d2a5da52f02ac68c96a4f5788e15c0

Analysis

max time kernel
0s
max time network
2s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
22/03/2025, 13:50

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

byte.mips.elf
Size

97KB
MD5

c820619893fd0b677a89c48d0d0311fb
SHA1

645bf25ab7534b32c0e6894addddc4d65d713205
SHA256

a5ae9ca612e870cac00cb4ffdf7f4c5d65d2a5da52f02ac68c96a4f5788e15c0
SHA512

a149086f1abd40ef4f18154d50f7050c1230fc16fe8f775a8fc6f23d6daae1542727b64c47271e204f484a30527a1c2b3bddf1965acaf73bafdcd39f7233ec4b
SSDEEP

1536:e65VvwW2yEk5I355hxAXYLOwXZMHOs8PGyq7HeLJyUkfl61d6xEp:e6TvJ5i3555iHOs8PJqgkf4UEp

Score

7^/10

defense_evasion discovery

Malware Config

Signatures

Modifies Watchdog functionality 1 TTPs 2 IoCs

Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

defense_evasion

Impair Defenses

T1562

description	ioc	Process
File opened for modification	/dev/watchdog	byte.mips.elf
File opened for modification	/dev/misc/watchdog	byte.mips.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	ca13pjje15b3ga1god	707	byte.mips.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
707	byte.mips.elf

/tmp/byte.mips.elf
/tmp/byte.mips.elf
1⤵
- Modifies Watchdog functionality
- Changes its process name
- System Network Configuration Discovery
PID:707

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

T1562

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads