Overview

overview

10

Static

static

10

0ae15ae0dd...08c6b0

linux_armhf

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0ae15ae0dd8888628e5b1e9f3f3a3d5bf9bbde44c2283568dbbcf69ea908c6b0
  • Size 121KB
  • Sample220630-3mhfmsecd2
  • SHA256 0ae15ae0dd8888628e5b1e9f3f3a3d5bf9bbde44c2283568dbbcf69ea908c6b0
  • MD5 SHA1 SHA512
Score
10/10
kaitenlinuxpersistencesuricata

Malware Config

Targets

    • Target
      0ae15ae0dd8888628e5b1e9f3f3a3d5bf9bbde44c2283568dbbcf69ea908c6b0
    • Size 121KB
    • SHA256 0ae15ae0dd8888628e5b1e9f3f3a3d5bf9bbde44c2283568dbbcf69ea908c6b0
    • MD5 SHA1 SHA512
    Score
    10/10
    persistencesuricata

    • suricata: ET MALWARE IRC Nick change on non-standard port

      suricata: ET MALWARE IRC Nick change on non-standard port

      suricata

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks