Overview

overview

10

Static

static

10

3e5ea611c5...23.elf

debian-9-mips

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    3e5ea611c546f5777fdd727ca3b17423.elf
  • Size 386KB
  • Sample221221-dfk6hsbe68
  • SHA256 0bb4dce69365ae39f2477b04ec5156dbff08c8ef3e11350bc7dbd3f61bae904d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
kaitenpersistence

Malware Config

Targets

    • Target
      3e5ea611c546f5777fdd727ca3b17423.elf
    • Size 386KB
    • SHA256 0bb4dce69365ae39f2477b04ec5156dbff08c8ef3e11350bc7dbd3f61bae904d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10
    persistence

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    • Modifies rc script

      Adding/modifying system rc scripts is a common persistence mechanism.

      persistence

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks