General

  • Target
    1a8cb0b71d77f0a9ce52b13e3e11af25
  • Size 27KB
  • Sample211212-z413jaceh4
  • SHA256 36c42eba3139f4148184e002ea7dacfd71030fee46ed56e3064615e16f374ffd
  • MD5 SHA1 SHA512
Score
9/10

Malware Config

Targets

    • Target
      1a8cb0b71d77f0a9ce52b13e3e11af25
    • Size 27KB
    • SHA256 36c42eba3139f4148184e002ea7dacfd71030fee46ed56e3064615e16f374ffd
    • MD5 SHA1 SHA512
    Score
    9/10
    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks