Overview

overview

10

Static

static

10

d00a1ff14b...484b61

debian-9-mipsel

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d00a1ff14bae4c15c4a72ae71ddf7f08fe4f2482a08fa6c4c4357e60d4484b61

  • Size

    240KB

  • Sample

    220731-l4qpxacaap

  • MD5

    1a25b1011c3c5f0accfa28e51350d924

  • SHA1

    40eafe92b002c9d191c2fc3f1d4155faeec828b2

  • SHA256

    d00a1ff14bae4c15c4a72ae71ddf7f08fe4f2482a08fa6c4c4357e60d4484b61

  • SHA512

    d51a87ad3376eea7274b6497af4120f4d369566c65cfc460a5e60a74e21caef69bdaf3ab5dd5066e03bf5793f7b60556cbc8ffc85bdc79f9b58faa1f96caa792

Score
10/10
kaitenpersistence

Malware Config

Targets

    • Target

      d00a1ff14bae4c15c4a72ae71ddf7f08fe4f2482a08fa6c4c4357e60d4484b61

    • Size

      240KB

    • MD5

      1a25b1011c3c5f0accfa28e51350d924

    • SHA1

      40eafe92b002c9d191c2fc3f1d4155faeec828b2

    • SHA256

      d00a1ff14bae4c15c4a72ae71ddf7f08fe4f2482a08fa6c4c4357e60d4484b61

    • SHA512

      d51a87ad3376eea7274b6497af4120f4d369566c65cfc460a5e60a74e21caef69bdaf3ab5dd5066e03bf5793f7b60556cbc8ffc85bdc79f9b58faa1f96caa792

    Score
    8/10
    persistence

    • Modifies hosts file

      Adds to hosts file used for mapping hosts to IP addresses.

    • Writes DNS configuration

      Writes data to DNS resolver config file.

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks