Overview

overview

10

Static

static

10

39351ab87e...a5.elf

debian-9-armhf

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    39351ab87eaded017421a800a75982a5.elf

  • Size

    139KB

  • Sample

    220915-q3jbnadcd6

  • MD5

    39351ab87eaded017421a800a75982a5

  • SHA1

    55416d1ce9a5942237feabd9cf1496649b412ae2

  • SHA256

    140d29c7ea02b4209430018cacef7eba0d9ff7853f9d4c9d1875b36733b4ba7b

  • SHA512

    5d6cac0af411a5299cee98e194d8e9df9da7c6cfc9c0d8da9dfbb7a90d154bfa4f20abf001f6bcbcd86ac3f87e2fd0154284214aa722f2e2dc98769b1059e9c0

  • SSDEEP

    3072:Cv/WwsLgaq353qHiCOvhOpXqkDQHbeskmhxQwoVSUNu:KPLaq351hOpXqkLskmhxQwoVSUNu

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      39351ab87eaded017421a800a75982a5.elf

    • Size

      139KB

    • MD5

      39351ab87eaded017421a800a75982a5

    • SHA1

      55416d1ce9a5942237feabd9cf1496649b412ae2

    • SHA256

      140d29c7ea02b4209430018cacef7eba0d9ff7853f9d4c9d1875b36733b4ba7b

    • SHA512

      5d6cac0af411a5299cee98e194d8e9df9da7c6cfc9c0d8da9dfbb7a90d154bfa4f20abf001f6bcbcd86ac3f87e2fd0154284214aa722f2e2dc98769b1059e9c0

    • SSDEEP

      3072:Cv/WwsLgaq353qHiCOvhOpXqkDQHbeskmhxQwoVSUNu:KPLaq351hOpXqkLskmhxQwoVSUNu

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks