Analysis
- max time kernel
0s - max time network
129s - platform
ubuntu-18.04_amd64 - resource
ubuntu1804-amd64-20260513-en - resource tags
- submitted
16/10/2026, 20:33
General
- Target 1.elf
- Size 460KB
- Sample261016-zb2tcsbf75
- SHA256 82e595d7f4b9f5c137d3dd814001044047acfcf97f596cf7f53bcb19a6180376
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Reads MAC address of network interface 2 TTPs 1 IoCs
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
- Reads hardware information 1 TTPs 1 IoCs
Accesses system info like serial numbers, manufacturer names etc.
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
Processes
-
/tmp/1.elf/tmp/1.elf1⤵
- Modifies Watchdog functionality
- Reads MAC address of network interface
- Reads hardware information
- Enumerates kernel/hardware configuration
- Reads runtime system information