Analysis
-
max time kernel
149s -
max time network
146s -
platform
ubuntu-22.04_amd64 -
resource
ubuntu2204-amd64-20240611-en -
resource tags
-
submitted
03-07-2024 01:09
General
-
Target
133562f29886fc8c85ce7083d4ff53fb.elf
-
Size
57KB
-
MD5
133562f29886fc8c85ce7083d4ff53fb
-
SHA1
56a063ff06fbfdc55444ab9cd47b5e54a8ba50fd
-
SHA256
3f509a48bfb5cf1a5da35c861c70b5777e61a5dbf250331e5e731a912a148672
-
SHA512
1c5965dc03cd2ae2403aa1079d006ebdaa9e7a9daa548d5df6588a5c5c75a6e4c75c62065927bc51f5860ad394733c89d73b04017c7bc482ae35ee68f3ef9212
-
SSDEEP
768:kbvzoZ2MvVVIXXz86kV+VT84keDpgfpZ/Lsx5JCvB53+LQOpZM5qikqs:SvzoTVIXDDkV+97pEZ/LOJUBJVe2qids
Score
7/10
Malware Config
Signatures
-
Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Unexpected DNS network traffic destination 1 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Writes file to system bin folder 1 TTPs 1 IoCs
-
Changes its process name 1 IoCs
-
Enumerates kernel/hardware configuration 1 TTPs 3 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
Processes
-
/tmp/133562f29886fc8c85ce7083d4ff53fb.elf/tmp/133562f29886fc8c85ce7083d4ff53fb.elf1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Changes its process name
- Enumerates kernel/hardware configuration
Network
MITRE ATT&CK Matrix ATT&CK v13
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1564-1-0x0000000000400000-0x000000000052bda0-memory.dmp