Overview

overview

7

Static

static

1

0d7c0839d0...08.elf

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    0d7c0839d0ea618402ae866d2a008b08.elf
  • Size 62KB
  • Sample230913-gn6c7scd83
  • SHA256 60f94e87fbd6361719c1ea173fa2d91f975b8706aac1f2eef17a19001ce8327d
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Targets

    • Target
      0d7c0839d0ea618402ae866d2a008b08.elf
    • Size 62KB
    • SHA256 60f94e87fbd6361719c1ea173fa2d91f975b8706aac1f2eef17a19001ce8327d
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10

    • Changes its process name

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks