Overview

overview

10

Static

static

10

e24c6cb2ad...40d4e5

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e24c6cb2ad7faff79348361bbf40d4e5

  • Size

    254KB

  • Sample

    230310-zz17qsfd23

  • MD5

    e24c6cb2ad7faff79348361bbf40d4e5

  • SHA1

    63f489e77f63d0309ec4d427204dafede4b8817a

  • SHA256

    3a98e6a34d48678896256c3b3556635c9a6fdd0a099d4a9029e6ccc4fb8bad47

  • SHA512

    ecaf245008ce9c857e5048c44745641cde1fd720ef5bc0c2d8cb81aba197f5d33e74e4206028abe36e452ea112a918cb9ac194811bba25341b32634154af12df

  • SSDEEP

    6144:HetQ6SFruJcHvTEaSytMQVL1eTDqWmf3kS17Dzt6:HEHSFruJcHLEaDmQVL1MqWmf3kC7Dzt6

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      e24c6cb2ad7faff79348361bbf40d4e5

    • Size

      254KB

    • MD5

      e24c6cb2ad7faff79348361bbf40d4e5

    • SHA1

      63f489e77f63d0309ec4d427204dafede4b8817a

    • SHA256

      3a98e6a34d48678896256c3b3556635c9a6fdd0a099d4a9029e6ccc4fb8bad47

    • SHA512

      ecaf245008ce9c857e5048c44745641cde1fd720ef5bc0c2d8cb81aba197f5d33e74e4206028abe36e452ea112a918cb9ac194811bba25341b32634154af12df

    • SSDEEP

      6144:HetQ6SFruJcHvTEaSytMQVL1eTDqWmf3kS17Dzt6:HEHSFruJcHLEaDmQVL1MqWmf3kC7Dzt6

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks