Overview

overview

10

Static

static

10

88d511c91f...9401be

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    88d511c91f6d3d5895a51781449401be

  • Size

    177KB

  • Sample

    220929-fxl59aahfm

  • MD5

    88d511c91f6d3d5895a51781449401be

  • SHA1

    294b41a47ebbb8dfa746effad2e80a91ca811c59

  • SHA256

    81aa1a7b60d466d637169a22171c8762e45043b694b68c6fd7987d1ac15b7f64

  • SHA512

    6aa90e261dabf7e71ed41e58bfccca22a5a95583f756daaf22beaab0ab7f986f16b90e193965934581fb455fbd9a7772423a3bbf8f724e33d2ab18e8b81ef34a

  • SSDEEP

    3072:6PC+RjGkWa6s/qSPeAjQM6PBtjYbPOgpM/9sAfymUwwFB7DXNu:61fWa6s/qSGAYPBVYbPOqM/9sAfymUwr

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      88d511c91f6d3d5895a51781449401be

    • Size

      177KB

    • MD5

      88d511c91f6d3d5895a51781449401be

    • SHA1

      294b41a47ebbb8dfa746effad2e80a91ca811c59

    • SHA256

      81aa1a7b60d466d637169a22171c8762e45043b694b68c6fd7987d1ac15b7f64

    • SHA512

      6aa90e261dabf7e71ed41e58bfccca22a5a95583f756daaf22beaab0ab7f986f16b90e193965934581fb455fbd9a7772423a3bbf8f724e33d2ab18e8b81ef34a

    • SSDEEP

      3072:6PC+RjGkWa6s/qSPeAjQM6PBtjYbPOgpM/9sAfymUwwFB7DXNu:61fWa6s/qSGAYPBVYbPOqM/9sAfymUwr

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks