General

  • Target
    parm7
  • Size 252KB
  • Sample260818-alnxtas1fx
  • SHA256 b148bc4a8632dc4215840454494bbe682de899c6b28515f7e6b57a3cb0a4ac06
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      parm7
    • Size 252KB
    • SHA256 b148bc4a8632dc4215840454494bbe682de899c6b28515f7e6b57a3cb0a4ac06
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v16

Tasks