Analysis
- max time kernel
89s - max time network
150s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
- submitted
11/11/2026, 11:18
General
- Target 685ead625b4c19072109abe236630d571da9a129cc2125c45a6446ab4910b80e.bin
- Size 165KB
- Sample261111-nd9ffaft7q
- SHA256 685ead625b4c19072109abe236630d571da9a129cc2125c45a6446ab4910b80e
Score
9/10
Malware Config
Signatures
- Contacts a large (23907) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
Processes
-
/tmp/685ead625b4c19072109abe236630d571da9a129cc2125c45a6446ab4910b80e.bin/tmp/685ead625b4c19072109abe236630d571da9a129cc2125c45a6446ab4910b80e.bin1⤵
- Modifies Watchdog functionality