Overview

overview

10

Static

static

10

3a98e6a34d...47.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e24c6cb2ad7faff79348361bbf40d4e5.bin

  • Size

    86KB

  • Sample

    230312-clbctsec8x

  • MD5

    255dffee04e8f6cba82f814ec41012b9

  • SHA1

    411222254490c031037ffb2828f9bc8f122e1bd6

  • SHA256

    dc629384c8829fb4c04a3467b2d441ee6ac3742287a0680bd460f12e6b7e0ae6

  • SHA512

    331b1be86cd5b8a1cbb72c584525e0b9d33507395b335ba6096607d6ac2a2ee8ff4b3157b3de52b8c9fc1c5080ac86f1fe01d428cfd20ba78eff3aefec690d6d

  • SSDEEP

    1536:C105tn0K5DOdSXatkjVnz1g8gL+REugdh/cGUN8EHRSKhJm8j9UDm:8gtF2tkjVnsCRHih/aNNECc8jWC

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      3a98e6a34d48678896256c3b3556635c9a6fdd0a099d4a9029e6ccc4fb8bad47.elf

    • Size

      254KB

    • MD5

      e24c6cb2ad7faff79348361bbf40d4e5

    • SHA1

      63f489e77f63d0309ec4d427204dafede4b8817a

    • SHA256

      3a98e6a34d48678896256c3b3556635c9a6fdd0a099d4a9029e6ccc4fb8bad47

    • SHA512

      ecaf245008ce9c857e5048c44745641cde1fd720ef5bc0c2d8cb81aba197f5d33e74e4206028abe36e452ea112a918cb9ac194811bba25341b32634154af12df

    • SSDEEP

      6144:HetQ6SFruJcHvTEaSytMQVL1eTDqWmf3kS17Dzt6:HEHSFruJcHLEaDmQVL1MqWmf3kC7Dzt6

    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks