Overview

overview

9

Static

static

1

SecuriteIn...93.elf

debian-9-mips

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    SecuriteInfo.com.Linux.Siggen.9999.32607.593.elf

  • Size

    29KB

  • Sample

    230304-cx1f4acd56

  • MD5

    f1422210a1d020e9a2bad6e0436f5b03

  • SHA1

    c5d3148863c0c8791b2656c630a028c47212a976

  • SHA256

    8533b4606bc1c049de0b20c63f25c3fb2237ad29c061112c6ffc2efb733c3111

  • SHA512

    54aa98d2e3716999e2d7be1cdb24df8f60dc890b970b8412dc5644dbd0172479e7d6286d31aa7a4096b62b7f150d1e56e924874663a786de5a10f7306d06df2a

  • SSDEEP

    768:fauqnAxWZW/Uvxy9HrXrbSCZ+ssxLj6DrEu+OefTlzFVfgUYwJgGlzDpbuR1Jq:fauqnPW/Uvk3bSCZ+LJ+DAu+fTJFdr//

Score
9/10
discovery

Malware Config

Targets

    • Target

      SecuriteInfo.com.Linux.Siggen.9999.32607.593.elf

    • Size

      29KB

    • MD5

      f1422210a1d020e9a2bad6e0436f5b03

    • SHA1

      c5d3148863c0c8791b2656c630a028c47212a976

    • SHA256

      8533b4606bc1c049de0b20c63f25c3fb2237ad29c061112c6ffc2efb733c3111

    • SHA512

      54aa98d2e3716999e2d7be1cdb24df8f60dc890b970b8412dc5644dbd0172479e7d6286d31aa7a4096b62b7f150d1e56e924874663a786de5a10f7306d06df2a

    • SSDEEP

      768:fauqnAxWZW/Uvxy9HrXrbSCZ+ssxLj6DrEu+OefTlzFVfgUYwJgGlzDpbuR1Jq:fauqnPW/Uvk3bSCZ+LJ+DAu+fTJFdr//

    Score
    9/10
    discovery

    • Contacts a large (20198) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks