Analysis
- max time kernel
135s - max time network
148s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260126-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260126-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
28/04/2026, 22:14
Behavioral task
behavioral1
Sample
asuna.x86.elf
Resource
ubuntu1804-amd64-20260126-en
2 signatures
150 seconds
General
- Target asuna.x86.elf
- Size 57KB
- Sample260428-15s9raez21
- SHA256 214e6a9d3edd15cfda9ef9a613d6b9a6a4025d62407a55d6ffe672c3a3f1d2a0
- MD5 a2401fc3326d56d5cf9d44ebf32d8cb9
- SHA1 84304ba5083ae62f181c6b855e17e8f5e9d7cc69
- SHA512 16305a6858e7f324a2e32c186c1d0903b0ff0c3bab46238abc4e5ab712be225af7a7617949a6e633c39b764a8b961a1391e851195794b15953068ab475a09aaf
- SSDEEP 1536:OWwApRflrGbpUjHZH9c/DX5KUbanuibjodSP0:OZURflSgfc/r5KOsLnoi0
- TLSH T1BD434BC9F643D0F5EC4A0AB52476BB238AB2D1FB2218DE47D778A531DD12613A425ECC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog asuna.x86.elf File opened for modification /dev/misc/watchdog asuna.x86.elf - Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /bin/watchdog asuna.x86.elf File opened for modification /sbin/watchdog asuna.x86.elf