General
- Target proxy.arm6-11
- Size 100KB
- Sample260515-wtak2sdx5s
- SHA256 1c59e357096fa3944a13e63850f529757c358722e60d5aa280aa3f24d5dee5e3
Score
7/10
Malware Config
Targets
-
- Target proxy.arm6-11
- Size 100KB
- SHA256 1c59e357096fa3944a13e63850f529757c358722e60d5aa280aa3f24d5dee5e3
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Runs EXE from memory
Runs an executable from memory, likely to minimize footprint
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.