Analysis
- max time kernel
149s - max time network
151s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
arch:amd64arch:i386image:ubuntu1804-amd64-20260513-enkernel:4.15.0-213-genericlocale:en-usos:ubuntu-18.04-amd64system - submitted
15/08/2026, 12:18
Behavioral task
behavioral1
Sample
sdfjgnjsdf.i486
Resource
ubuntu1804-amd64-20260513-en
2 signatures
150 seconds
General
- Target sdfjgnjsdf.i486
- Size 50KB
- Sample260815-pgmarawblh
- SHA256 637f603f6750b1f51d4bed64ab6cb1cc369cdbb0c0caed371f4169d7816ad667
- MD5 468a57f019680650f0c6620cc6732b83
- SHA1 828e4e25580f1e61cf980d9b6c48893eed661233
- SHA512 7594e449098b69a5c8a12d7de7aa52bc31bac89509aabc66b4ffda11d0ce2dddd2b85c2bbdb743aeedf6905c8f49c6b8c35aed574e380ddd765161c5325aacc9
- SSDEEP 1536:4mWt248Zyk1cNsMT3H8HkCoNZ4nouy8ryH:4mWt2ZdCsMT3HGkCogoutM
- TLSH T17033F1F3EEE2C335C665103B11EEBE4974229E26C84560F47E84AA36ED4CF2F5612356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog sdfjgnjsdf.i486 File opened for modification /dev/misc/watchdog sdfjgnjsdf.i486 - Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog sdfjgnjsdf.i486 File opened for modification /bin/watchdog sdfjgnjsdf.i486