Overview

overview

10

Static

static

10

ea90699a0a...e6.elf

debian-9-mips

9

Sharing

Copy URL Twitter E-mail

General

  • Target
    ea90699a0a702614fd8f533961a45c1c3d1c0ea1da96ccbba4ea745e640bebe6.zip
  • Size 50KB
  • Sample230321-qqcckscf2t
  • SHA256 b7b23bc24ecef2aad405fcc359bbf1cb7987d804b39a0967201d0bdd42c1e869
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
gafgyt

Malware Config

Targets

    • Target
      ea90699a0a702614fd8f533961a45c1c3d1c0ea1da96ccbba4ea745e640bebe6.elf
    • Size 151KB
    • SHA256 ea90699a0a702614fd8f533961a45c1c3d1c0ea1da96ccbba4ea745e640bebe6
    • MD5 SHA1 SHA512 SSDEEP
    Score
    9/10

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Reads system network configuration

      Uses contents of /proc filesystem to enumerate network settings.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks