General

  • Target
    s1.armv7l
  • Size 64KB
  • Sample260909-aml5lsztev
  • SHA256 03442fc0590d0762783e456d7d69fce6d6bf076eee85544587693b37072007bc
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      s1.armv7l
    • Size 64KB
    • SHA256 03442fc0590d0762783e456d7d69fce6d6bf076eee85544587693b37072007bc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Renames itself

    • Reads process memory

      Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.

MITRE ATT&CK Enterprise v16

Tasks