Overview

overview

10

Static

static

10

8b0ac00f2d...JC.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8b0ac00f2d3378a745118d937e7d53cb52ccb16884492f5a599f021b67194461_JC.elf

  • Size

    113KB

  • Sample

    230904-ygr1nsaf8w

  • MD5

    765f908ecf5f70b005df7685668ea042

  • SHA1

    af2b6fcf4ab06f95701ee5aa84a954270eb012c2

  • SHA256

    8b0ac00f2d3378a745118d937e7d53cb52ccb16884492f5a599f021b67194461

  • SHA512

    4d0e18a46e0ef8a0731d8bac3278a8b4716641e412b3fa24b0438cdbf5c5ac0d51ad76ad281f4f35f880b551434e772d600ef9b874f00ae084057bf451084cb9

  • SSDEEP

    3072:kiry859a2ADJf9wHYqbgFFo8+HeA8+TRCm7FnVqfJXFWbNb:T9a2aLqkrMTsm7FnVqfJXFWbNb

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      8b0ac00f2d3378a745118d937e7d53cb52ccb16884492f5a599f021b67194461_JC.elf

    • Size

      113KB

    • MD5

      765f908ecf5f70b005df7685668ea042

    • SHA1

      af2b6fcf4ab06f95701ee5aa84a954270eb012c2

    • SHA256

      8b0ac00f2d3378a745118d937e7d53cb52ccb16884492f5a599f021b67194461

    • SHA512

      4d0e18a46e0ef8a0731d8bac3278a8b4716641e412b3fa24b0438cdbf5c5ac0d51ad76ad281f4f35f880b551434e772d600ef9b874f00ae084057bf451084cb9

    • SSDEEP

      3072:kiry859a2ADJf9wHYqbgFFo8+HeA8+TRCm7FnVqfJXFWbNb:T9a2aLqkrMTsm7FnVqfJXFWbNb

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks