Overview

overview

10

Static

static

10

330b6d20dc...227246

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    330b6d20dcf491891c238e0ff8227246

  • Size

    143KB

  • Sample

    231219-2vwskaaah9

  • MD5

    330b6d20dcf491891c238e0ff8227246

  • SHA1

    b084fc9344039ca94a1e4b7bd60cb0ca225e62d5

  • SHA256

    f0539a4f031be95dddfd52cda4b2ea5b571f3629f350ca566082d7385f894cb7

  • SHA512

    06b135d6579ed001843bd7f2ce400f136e728ddec662adc749ee80c74d7e1689959fea7d21a2af0a38db2abc02850db29128d8ba4e95595525e833bc77a5b12b

  • SSDEEP

    3072:gSEYHqQ6jaWTXFmZxSCA3aQjM5FMgFxLE1dkO7LSQmy0PQALGNDv:gSEYg3aQjM7E3kO71my0PQALGNDv

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      330b6d20dcf491891c238e0ff8227246

    • Size

      143KB

    • MD5

      330b6d20dcf491891c238e0ff8227246

    • SHA1

      b084fc9344039ca94a1e4b7bd60cb0ca225e62d5

    • SHA256

      f0539a4f031be95dddfd52cda4b2ea5b571f3629f350ca566082d7385f894cb7

    • SHA512

      06b135d6579ed001843bd7f2ce400f136e728ddec662adc749ee80c74d7e1689959fea7d21a2af0a38db2abc02850db29128d8ba4e95595525e833bc77a5b12b

    • SSDEEP

      3072:gSEYHqQ6jaWTXFmZxSCA3aQjM5FMgFxLE1dkO7LSQmy0PQALGNDv:gSEYg3aQjM7E3kO71my0PQALGNDv

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks