Overview

overview

10

Static

static

10

67b7cae9a8...891c98

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    67b7cae9a8750b6d88534871e9891c98

  • Size

    122KB

  • Sample

    231219-3f3g8saeg6

  • MD5

    67b7cae9a8750b6d88534871e9891c98

  • SHA1

    b368c535d75641e065f4095d627d8847d5c7eafd

  • SHA256

    5510b9d495f42659ae33fb5da98a085096fed5a5ce190f189a42f99843f0db1c

  • SHA512

    67399d2b4d8d61d4e6168b3421bc81c7b7cb2b299ba00d1f1be16b0e995a985ad469e976df2a267ed94effeb7a063212f45f14eddc65f57b579384cd1a44d4e8

  • SSDEEP

    3072:4jDy/+mh1vtbPIKaJbpcUPium7/L7QsvmGfIiNb:mOJ1vxfaJbywm7/L7QsvmGfIiNb

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      67b7cae9a8750b6d88534871e9891c98

    • Size

      122KB

    • MD5

      67b7cae9a8750b6d88534871e9891c98

    • SHA1

      b368c535d75641e065f4095d627d8847d5c7eafd

    • SHA256

      5510b9d495f42659ae33fb5da98a085096fed5a5ce190f189a42f99843f0db1c

    • SHA512

      67399d2b4d8d61d4e6168b3421bc81c7b7cb2b299ba00d1f1be16b0e995a985ad469e976df2a267ed94effeb7a063212f45f14eddc65f57b579384cd1a44d4e8

    • SSDEEP

      3072:4jDy/+mh1vtbPIKaJbpcUPium7/L7QsvmGfIiNb:mOJ1vxfaJbywm7/L7QsvmGfIiNb

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks