Overview

overview

9

Static

static

1

12c201642c...9951e8

debian-9-mipsel

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    12c201642c28a22e9067f8da559951e8

  • Size

    54KB

  • Sample

    231219-2gkhdacfa4

  • MD5

    12c201642c28a22e9067f8da559951e8

  • SHA1

    7b84a47c99911b58c8297067e79411d1a2a99d7a

  • SHA256

    9529dd2bccd02f52d0878fe2fb0db04249fde438c1e978afb8d656ddd2dd4098

  • SHA512

    c836a5f319bd1784bc4dcdbd2df849daf7fde6b0ff154466bf57674bd2d0cae1c363b53cdedfdb7e0f62f6ffaf6ec793885788fb4d5889b9cb5692a7c1d2a9f3

  • SSDEEP

    768:T/uHh/qm0JrU72GjaxDePepheXXoAjw7Y/Yg0Y43Xigck0JfhKgDSKxIYK:acVU6ZKkhsCkAg0XF0Jfx

Score
9/10
discovery

Malware Config

Targets

    • Target

      12c201642c28a22e9067f8da559951e8

    • Size

      54KB

    • MD5

      12c201642c28a22e9067f8da559951e8

    • SHA1

      7b84a47c99911b58c8297067e79411d1a2a99d7a

    • SHA256

      9529dd2bccd02f52d0878fe2fb0db04249fde438c1e978afb8d656ddd2dd4098

    • SHA512

      c836a5f319bd1784bc4dcdbd2df849daf7fde6b0ff154466bf57674bd2d0cae1c363b53cdedfdb7e0f62f6ffaf6ec793885788fb4d5889b9cb5692a7c1d2a9f3

    • SSDEEP

      768:T/uHh/qm0JrU72GjaxDePepheXXoAjw7Y/Yg0Y43Xigck0JfhKgDSKxIYK:acVU6ZKkhsCkAg0XF0Jfx

    Score
    9/10
    discovery

    • Contacts a large (61035) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks