Overview

overview

10

Static

static

10

5f0a4ef2da...43.elf

debian-9-mipsel

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    5f0a4ef2da06e574b738af9d73c9f043.elf
  • Size 386KB
  • Sample221221-ddv8psef4w
  • SHA256 b7e933e7cf23f0932c64e67df58deeb00b2e8af655e7aa679239c633018c5499
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
kaitenpersistence

Malware Config

Targets

    • Target
      5f0a4ef2da06e574b738af9d73c9f043.elf
    • Size 386KB
    • SHA256 b7e933e7cf23f0932c64e67df58deeb00b2e8af655e7aa679239c633018c5499
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    persistence

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks