Analysis
- max time kernel
90s - max time network
133s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20250619-en - resource tags
- submitted
13/10/2025, 17:22
General
- Target cron.elf
- Size 117KB
- Sample251013-vxtyesfv7f
- SHA256 49640afcad84adbb93ae8e21652bfd4f4cdd1391c0cd05a976e8e11e18dae058
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
- Changes its process name 1 IoCs
- Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
- Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.