Analysis
- max time kernel
141s - max time network
134s - platform
ubuntu-20.04_amd64 - resource
ubuntu2004-amd64-20250619-en - resource tags
arch:amd64arch:i386image:ubuntu2004-amd64-20250619-enkernel:5.4.0-169-genericlocale:en-usos:ubuntu-20.04-amd64system - submitted
09/08/2025, 06:04
Behavioral task
behavioral1
Sample
debug.elf
Resource
ubuntu2004-amd64-20250619-en
4 signatures
150 seconds
General
- Target debug.elf
- Size 31KB
- Sample250809-gs3swahj21
- SHA256 109fc56df84e6ba97d55fff2e6fde6478ae29547d4edef3e140fed16be3640df
- MD5 bec0c0a25f6c89fb3bcf74feeff34a32
- SHA1 1c664e8fc4815fb9bd8a5e27b2403cedd217edfa
- SHA512 e752f58cafc92f3c658ffcd1841d23fb3a2cbd4069ae88c0cd91a89cc03c277cd3c8976b10d42c84cb7739b92425020b59fb9e0c5e45588f606f21775d2f9ed3
- SSDEEP 768:uNNytoDUA1l6rTfa2lRyyM7pO40p882CONzeBvZRcUr:uN1+rTf1WRmy8vUaZRX
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Malware Config
Signatures
- Mirai family
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc File opened for modification /dev/watchdog File opened for modification /dev/misc/watchdog - Writes file to system bin folder 2 IoCs
description ioc File opened for modification /sbin/watchdog File opened for modification /bin/watchdog