General
-
Target
ea90699a0a702614fd8f533961a45c1c3d1c0ea1da96ccbba4ea745e640bebe6.zip
-
Size
50KB
-
Sample
230321-qqcckscf2t
-
MD5
64d56e97de3e029a03c9b38078b4114d
-
SHA1
148280e3fff841fce3b6ef19a6920d3173f124f0
-
SHA256
b7b23bc24ecef2aad405fcc359bbf1cb7987d804b39a0967201d0bdd42c1e869
-
SHA512
483ca3e294ab21d5240c63a73e7fca7d5f6cb37d02559fd462f85f95da8fcc87592022b618722d38c5cfebb50b3cd7e18b636230479136eb6a446fbe2ed55746
-
SSDEEP
1536:KqSmF9VHyb1V8+1sR61GLqOkqSnzNjsxnGc8D2LrR:vD3M1V8GsI1GLVjxGc8D4
Behavioral task
behavioral1
Sample
ea90699a0a702614fd8f533961a45c1c3d1c0ea1da96ccbba4ea745e640bebe6.elf
Resource
debian9-mipsbe-20221111-en
Malware Config
Targets
-
-
Target
ea90699a0a702614fd8f533961a45c1c3d1c0ea1da96ccbba4ea745e640bebe6.elf
-
Size
151KB
-
MD5
723da50f4df1235c3669184fa5e26330
-
SHA1
78a2a2bca0c788adf0cf2dc9e69e5b841d3675be
-
SHA256
ea90699a0a702614fd8f533961a45c1c3d1c0ea1da96ccbba4ea745e640bebe6
-
SHA512
f6e03b47d5d2b09883298fabbc008f1c43a29b3ccd8a7dc2095d23b492af6efe6228f1e7d334962141910fa83c0d87dc685b79a4132377c88930963f1d287b9e
-
SSDEEP
3072:nWhzYxYCS1bxmjwLkqkmksQnGXmrThPaLEnvPrNb:WhUe4uk9GXmrThPaLEnvPrNb
Score9/10-
Modifies the Watchdog daemon
Malware like Mirai modify the Watchdog to prevent it restarting an infected system.
-
Reads system routing table
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration
Uses contents of /proc filesystem to enumerate network settings.
-