Overview

overview

10

Static

static

10

ca3ba58cdc...27.elf

debian-9-mipsel

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    ca3ba58cdcb0ee75a6f00f70f6ab6d27.elf

  • Size

    55KB

  • Sample

    230328-kr54dshh86

  • MD5

    ca3ba58cdcb0ee75a6f00f70f6ab6d27

  • SHA1

    9ab545a9a76e42f92342dcbf6400d06832379320

  • SHA256

    3ec548d511742813215c3015b4c5cc73ad10593886f5bdc9b78650f3fe2faa1f

  • SHA512

    170b83d7036b27af3950730c6a41c994148fdef7cc2d448fd86d8486d7f385869beae555316a82c94dca1e848d4a7ec8aa8609e44ddd5b256efe84b281f82427

  • SSDEEP

    768:gH2Dn/oCOZejsoYCfmczbttLKk9rm55qaetMeOLe8NVvikXXiXRpg4DAV:gWD/oCuSfAyW1oMXLPNVvJb4U

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      ca3ba58cdcb0ee75a6f00f70f6ab6d27.elf

    • Size

      55KB

    • MD5

      ca3ba58cdcb0ee75a6f00f70f6ab6d27

    • SHA1

      9ab545a9a76e42f92342dcbf6400d06832379320

    • SHA256

      3ec548d511742813215c3015b4c5cc73ad10593886f5bdc9b78650f3fe2faa1f

    • SHA512

      170b83d7036b27af3950730c6a41c994148fdef7cc2d448fd86d8486d7f385869beae555316a82c94dca1e848d4a7ec8aa8609e44ddd5b256efe84b281f82427

    • SSDEEP

      768:gH2Dn/oCOZejsoYCfmczbttLKk9rm55qaetMeOLe8NVvikXXiXRpg4DAV:gWD/oCuSfAyW1oMXLPNVvJb4U

    Score
    9/10
    discovery

    • Contacts a large (69933) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies the Watchdog daemon

      Malware like Mirai modify the Watchdog to prevent it restarting an infected system.

    • Reads runtime system information

      Reads data from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks