Overview

overview

10

Static

static

10

97717ad2ff...e06544

linux_mipsel

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    97717ad2ff60ac257a5f66634fe06544
  • Size 156KB
  • Sample220314-cb5tpabgf3
  • SHA256 95d1fca8bea30d9629fdf05e6ba0fc6195eb0a86f99ea021b17cb8823db9d78b
  • MD5 SHA1 SHA512
Score
10/10
kaitenlinuxpersistence

Malware Config

Targets

    • Target
      97717ad2ff60ac257a5f66634fe06544
    • Size 156KB
    • SHA256 95d1fca8bea30d9629fdf05e6ba0fc6195eb0a86f99ea021b17cb8823db9d78b
    • MD5 SHA1 SHA512
    Score
    9/10
    persistence

    • Writes file to system bin folder

    • Modifies hosts file

      Adds to hosts file used for mapping hosts to IP addresses.

    • Writes DNS configuration

      Writes data to DNS resolver config file.

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Write file to user bin folder

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    • Writes file to tmp directory

      Malware often drops required files in the /tmp directory.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks