General

  • Target

    MIPSEL

  • Size

    128KB

  • Sample

    210916-2chszsede3

  • MD5

    49f971d4401e21e1e46a309cbda25856

  • SHA1

    4dcd1a7b5883bcfc43efacc4452a8b320d6eed77

  • SHA256

    bc0eff7c4802ef58d903d051a7ba42c6ddae568750e577f61f5f85cb4d634c41

  • SHA512

    7e5b0e50af2164b6da71d000a1a007e7c24909661dfd0fb8988cb4192486440b4ee03ea4585e0ee5a7575d0274f0ba4ca4ccac33067a6cfc52f48e2d254231fe

Score
10/10

Malware Config

Targets

    • Target

      MIPSEL

    • Size

      128KB

    • MD5

      49f971d4401e21e1e46a309cbda25856

    • SHA1

      4dcd1a7b5883bcfc43efacc4452a8b320d6eed77

    • SHA256

      bc0eff7c4802ef58d903d051a7ba42c6ddae568750e577f61f5f85cb4d634c41

    • SHA512

      7e5b0e50af2164b6da71d000a1a007e7c24909661dfd0fb8988cb4192486440b4ee03ea4585e0ee5a7575d0274f0ba4ca4ccac33067a6cfc52f48e2d254231fe

    Score
    9/10
    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

MITRE ATT&CK Enterprise v6

Tasks