Overview

overview

9

Static

static

8

Mozi.m

linux_mips

9

Resubmissions

07/07/2024, 22:03

240707-1ym46a1elg9

07/07/2024, 21:57

240707-1t47wayfmm8

07/02/2021, 04:14

210207-2m45a29q5j9

Sharing

Copy URL Twitter E-mail

General

  • Target
    Mozi.m
  • Size 132KB
  • Sample210207-2m45a29q5j
  • SHA256 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7
  • MD5 SHA1 SHA512
Score
9/10
linux

Malware Config

Targets

    • Target
      Mozi.m
    • Size 132KB
    • SHA256 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7
    • MD5 SHA1 SHA512
    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Modifies hosts file

      Adds to hosts file used for mapping hosts to IP addresses.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks