Overview

overview

10

Static

static

10

43f3ffa195...50.elf

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    43f3ffa195bf0ea8688a30c3732aee50.elf

  • Size

    150KB

  • Sample

    231022-pll6jsgc3y

  • MD5

    43f3ffa195bf0ea8688a30c3732aee50

  • SHA1

    e1c89dee5593135e34e701aa34bd2bc002f08b65

  • SHA256

    88c611c52a2e2c62eb4bf3bbcbca827ed34583e17f8e7a12404fff4f8ad7348b

  • SHA512

    3f52e098a86dfe1c98608d57b6f9c5e7f008ef51a3cfc854592cf25b4a3c3e300841a6faea6aa90a5daa7f9bda9aebf78a847912a1e091d38d9421c0fe6447cc

  • SSDEEP

    3072:tHjWvvLQ9TtaFa2tfpBfxPvN9XsxHxiUyHOComweQSSycZNu:sUjaQ2tdNFOHsRpomweQSSycZNu

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      43f3ffa195bf0ea8688a30c3732aee50.elf

    • Size

      150KB

    • MD5

      43f3ffa195bf0ea8688a30c3732aee50

    • SHA1

      e1c89dee5593135e34e701aa34bd2bc002f08b65

    • SHA256

      88c611c52a2e2c62eb4bf3bbcbca827ed34583e17f8e7a12404fff4f8ad7348b

    • SHA512

      3f52e098a86dfe1c98608d57b6f9c5e7f008ef51a3cfc854592cf25b4a3c3e300841a6faea6aa90a5daa7f9bda9aebf78a847912a1e091d38d9421c0fe6447cc

    • SSDEEP

      3072:tHjWvvLQ9TtaFa2tfpBfxPvN9XsxHxiUyHOComweQSSycZNu:sUjaQ2tdNFOHsRpomweQSSycZNu

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks