General

  • Target
    894fb4cb10bfa6096733c1b1b0b461c4
  • Size 31KB
  • Sample211224-asyetscgal
  • SHA256 2d14e4d3a0f7f35e923cb416e036c1c35fe4f2a67ea034c473fbfe18ae05d3db
  • MD5 SHA1 SHA512
Score
9/10

Malware Config

Targets

    • Target
      894fb4cb10bfa6096733c1b1b0b461c4
    • Size 31KB
    • SHA256 2d14e4d3a0f7f35e923cb416e036c1c35fe4f2a67ea034c473fbfe18ae05d3db
    • MD5 SHA1 SHA512
    Score
    9/10
    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

MITRE ATT&CK Enterprise v6

Tasks