6951360aea564ae075f37de549b1f13cd6655082dff8acd1bee1f98e94edbd74 | Triage

Sharing

General

Target

6951360aea564ae075f37de549b1f13cd6655082dff8acd1bee1f98e94edbd74
Size

34KB
Sample

221125-lzhthahc33
MD5

83d67f3c4dbd72515445b58c62f1d694
SHA1

084d757318d8879b05553caa1792c7441d7b6b88
SHA256

6951360aea564ae075f37de549b1f13cd6655082dff8acd1bee1f98e94edbd74
SHA512

3e0bdc70406a71a5a1c3caa9dc502b844470d93ef23ca3f1212852e4d39b9f57380199394446b28bd66598bb4737950b9b65511ebdbc2e6ce39acbdbeaa4878c
SSDEEP

768:wu3q6VzWtb8Hf74Zk8v+wgRUJ8hoO/96gpAGR4WRWqh:13XV6F8HfMzLgRUJ6f/NpAGnh

Score

9^/10

Malware Config

Targets

- Target
  
  6951360aea564ae075f37de549b1f13cd6655082dff8acd1bee1f98e94edbd74
- Size
  
  34KB
- MD5
  
  83d67f3c4dbd72515445b58c62f1d694
- SHA1
  
  084d757318d8879b05553caa1792c7441d7b6b88
- SHA256
  
  6951360aea564ae075f37de549b1f13cd6655082dff8acd1bee1f98e94edbd74
- SHA512
  
  3e0bdc70406a71a5a1c3caa9dc502b844470d93ef23ca3f1212852e4d39b9f57380199394446b28bd66598bb4737950b9b65511ebdbc2e6ce39acbdbeaa4878c
- SSDEEP
  
  768:wu3q6VzWtb8Hf74Zk8v+wgRUJ8hoO/96gpAGR4WRWqh:13XV6F8HfMzLgRUJ6f/NpAGnh
Score

9^/10
- Modifies the Watchdog daemon
  Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
- Reads system routing table
  Gets active network interfaces from /proc virtual filesystem.
- Reads system network configuration
  Uses contents of /proc filesystem to enumerate network settings.
- Reads runtime system information
  Reads data from /proc virtual filesystem.
behavioral1

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1