Overview

overview

10

Static

static

10

dbd3afda09...82f792

linux_mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    dbd3afda09d281ca7600c7c65ce4ad7c4799e9300386e72007de63e7d282f792

  • Size

    240KB

  • Sample

    220625-e5c2waebhn

  • MD5

    347f6cfc68b6abc046e943cc243acf4f

  • SHA1

    82db8cca109f3f2f60aee02943878e761d3c33eb

  • SHA256

    dbd3afda09d281ca7600c7c65ce4ad7c4799e9300386e72007de63e7d282f792

  • SHA512

    08e9eb0adf00b8832fe6f378894117e6ab72c47cf7a599c33f505effd5a124ef2f9028bfe8b69c4b0eb28f5c184e811aea49bc8056adf7abe9ddfc050e5ba19e

Score
10/10
kaitenlinuxpersistence

Malware Config

Targets

    • Target

      dbd3afda09d281ca7600c7c65ce4ad7c4799e9300386e72007de63e7d282f792

    • Size

      240KB

    • MD5

      347f6cfc68b6abc046e943cc243acf4f

    • SHA1

      82db8cca109f3f2f60aee02943878e761d3c33eb

    • SHA256

      dbd3afda09d281ca7600c7c65ce4ad7c4799e9300386e72007de63e7d282f792

    • SHA512

      08e9eb0adf00b8832fe6f378894117e6ab72c47cf7a599c33f505effd5a124ef2f9028bfe8b69c4b0eb28f5c184e811aea49bc8056adf7abe9ddfc050e5ba19e

    Score
    7/10
    persistence

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks