Overview

overview

10

Static

static

10

0b564a2053...89.elf

debian-9-mips

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b564a2053988dbd3c1aaffa20083989.elf

  • Size

    156KB

  • Sample

    230226-mbyqgsgd5w

  • MD5

    0b564a2053988dbd3c1aaffa20083989

  • SHA1

    f1ac655a9a1eec8985cb29982d8990f5a71b795e

  • SHA256

    229ac9cb37d0ec6bf658c847218984be2393e8bde9746a8baea4eee805fa9bdb

  • SHA512

    130a021d0c841a0a9b1413487f9be938d404fc798d3f89399e97e60c5294f62667344293d540ac6a190933e2e5d26c27dff67131b00ed9e6406e003a4d0f0dbb

  • SSDEEP

    3072:DnUEs3UNwBLGqqKh5DaFnrPjDi+tsM9qSX9bNi:DDsTBCT0enrPjDi+tsM9qSX9bNi

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      0b564a2053988dbd3c1aaffa20083989.elf

    • Size

      156KB

    • MD5

      0b564a2053988dbd3c1aaffa20083989

    • SHA1

      f1ac655a9a1eec8985cb29982d8990f5a71b795e

    • SHA256

      229ac9cb37d0ec6bf658c847218984be2393e8bde9746a8baea4eee805fa9bdb

    • SHA512

      130a021d0c841a0a9b1413487f9be938d404fc798d3f89399e97e60c5294f62667344293d540ac6a190933e2e5d26c27dff67131b00ed9e6406e003a4d0f0dbb

    • SSDEEP

      3072:DnUEs3UNwBLGqqKh5DaFnrPjDi+tsM9qSX9bNi:DDsTBCT0enrPjDi+tsM9qSX9bNi

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks