Overview

overview

9

Static

static

ee1e3bfed6...9d.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ee1e3bfed6bf2eeb29a01d514071759d.elf

  • Size

    68KB

  • Sample

    221123-ws7jdsch72

  • MD5

    ee1e3bfed6bf2eeb29a01d514071759d

  • SHA1

    2e64c01aa9d54feefb93e95ed01889611fa48e4c

  • SHA256

    6cacae2a726d74c06d48a96f96189b1cd0474154ea7eaef4f24790bcaa9332bf

  • SHA512

    a04b8c6c733c457e124fae4eb6afd50de80e2a7f8761d5e372ec7f4218f448eebfa381f0ec32e9b2d47d4fbfd7c07dacf0358445efd978d3d2beabe76d04ba2e

  • SSDEEP

    1536:H4EqMiWN37fPlROoXumPr2zTsiRMSxnhIrSbQhM8WIaricCpYgJKc:H/bDXlRmQr2UX8nCrS8hM8RsNqYgYc

Score
9/10

Malware Config

Targets

    • Target

      ee1e3bfed6bf2eeb29a01d514071759d.elf

    • Size

      68KB

    • MD5

      ee1e3bfed6bf2eeb29a01d514071759d

    • SHA1

      2e64c01aa9d54feefb93e95ed01889611fa48e4c

    • SHA256

      6cacae2a726d74c06d48a96f96189b1cd0474154ea7eaef4f24790bcaa9332bf

    • SHA512

      a04b8c6c733c457e124fae4eb6afd50de80e2a7f8761d5e372ec7f4218f448eebfa381f0ec32e9b2d47d4fbfd7c07dacf0358445efd978d3d2beabe76d04ba2e

    • SSDEEP

      1536:H4EqMiWN37fPlROoXumPr2zTsiRMSxnhIrSbQhM8WIaricCpYgJKc:H/bDXlRmQr2UX8nCrS8hM8RsNqYgYc

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Modifies hosts file

      Adds to hosts file used for mapping hosts to IP addresses.

    • Writes DNS configuration

      Writes data to DNS resolver config file.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks