Overview

overview

10

Static

static

10

4293a7bf79...11.elf

debian-9-mipsel

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    336374e94942a02cda6c4fded9b136f9.bin

  • Size

    49KB

  • Sample

    230818-bk7tzaee46

  • MD5

    5e300fe62581f5c3d051b503b07838ca

  • SHA1

    1ddaf4c37d5154114183478a054c9d42e2f299ea

  • SHA256

    702c643d286ac3d7d8d57972c50b6c63d07b859a740bdbc8b97f185636666249

  • SHA512

    8310ab6905c7720ce7ffba6bf0dcf681007e0bbb2a537b89017cfe9c08dc214d08cfef00e0b746178be69d198d0e6ebcce34be446bb9e58c7781abcf25c3f871

  • SSDEEP

    768:WVraWT0VVVKJzJSLhVzyREBeSkXOiZ9UBc0aGz8N0VyAac+CbZT8Em4W:iO5VKFsLnFBRke2910Xw0yAa5Cb2Eml

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      4293a7bf796a50a9f83d894dc1643cdbc73edf88031c68516c2393712e72a511.elf

    • Size

      151KB

    • MD5

      336374e94942a02cda6c4fded9b136f9

    • SHA1

      f64e9d0c9218f439c3313e0a6f42b9891d37b110

    • SHA256

      4293a7bf796a50a9f83d894dc1643cdbc73edf88031c68516c2393712e72a511

    • SHA512

      d9d69d01d3e48530aef449fb6830e0db2fc60945de879f105c238eed84784473087fb819084094b6679ecf43ca97d45c77af6e8db0bc804f4ef78b0158090fc1

    • SSDEEP

      3072:dgZc9h1jlnLA2PiXYeyCc+VNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZ+VWDo9mrThPaLEnvP5

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks