Overview

overview

10

Static

static

10

d98d71b1ae...7b.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d98d71b1ae096f02d7b9b6789adef97b.elf

  • Size

    101KB

  • Sample

    230530-j29c5agg4s

  • MD5

    d98d71b1ae096f02d7b9b6789adef97b

  • SHA1

    2113626d096ede7e9f0fc8799cc8687e2ccaa3a4

  • SHA256

    454e5dc80e102224337bfd30b4b01ad697cc2da629420d415916baa049fbe44f

  • SHA512

    df40bde458c844bdaab0e05961e3014edb01d48013e7f7421323abb889473738383c75435302f5b80355823c87c77e68e4ba13fd1fcf717c72352c85ce279578

  • SSDEEP

    3072:wW8FUmgujld6Mkxm6AJ+4fnHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fnHmmFVcqq0GnDZT

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      d98d71b1ae096f02d7b9b6789adef97b.elf

    • Size

      101KB

    • MD5

      d98d71b1ae096f02d7b9b6789adef97b

    • SHA1

      2113626d096ede7e9f0fc8799cc8687e2ccaa3a4

    • SHA256

      454e5dc80e102224337bfd30b4b01ad697cc2da629420d415916baa049fbe44f

    • SHA512

      df40bde458c844bdaab0e05961e3014edb01d48013e7f7421323abb889473738383c75435302f5b80355823c87c77e68e4ba13fd1fcf717c72352c85ce279578

    • SSDEEP

      3072:wW8FUmgujld6Mkxm6AJ+4fnHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fnHmmFVcqq0GnDZT

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v6

Tasks