General

  • Target
    parm7
  • Size 252KB
  • Sample260805-pgkf6a1yd1
  • SHA256 dbf46eac8bebada17c1fc112d3da97cb322752bf7999f735d9ed2a2677be24a5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      parm7
    • Size 252KB
    • SHA256 dbf46eac8bebada17c1fc112d3da97cb322752bf7999f735d9ed2a2677be24a5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v16

Tasks