Overview

overview

10

Static

static

10

07f5bc6013...be7359

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    07f5bc60130cc2c913275dcdfebe7359

  • Size

    151KB

  • Sample

    231219-mlpkkacgbq

  • MD5

    07f5bc60130cc2c913275dcdfebe7359

  • SHA1

    a7dabbca6a8ef3ad478c2cb317765277dcbfdf14

  • SHA256

    fab2a3994594601d9587fd301d5e1902967ca7ebc1b508dd143fb6191200e7bd

  • SHA512

    7e3a73dc1814b3b906f19a0f2cae3104ebb3b7fa6e8e39feaec24b6284c79950d4bac7d78f84e31d8463c3fb43f8f2ac048dd024f67773bce4317f7d20c75c73

  • SSDEEP

    3072:JW6dm9tS1aRGQdK76t/zCxI5mrThPaLEnvPrN+:c6IG+LC2mrThPaLEnvPrN+

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      07f5bc60130cc2c913275dcdfebe7359

    • Size

      151KB

    • MD5

      07f5bc60130cc2c913275dcdfebe7359

    • SHA1

      a7dabbca6a8ef3ad478c2cb317765277dcbfdf14

    • SHA256

      fab2a3994594601d9587fd301d5e1902967ca7ebc1b508dd143fb6191200e7bd

    • SHA512

      7e3a73dc1814b3b906f19a0f2cae3104ebb3b7fa6e8e39feaec24b6284c79950d4bac7d78f84e31d8463c3fb43f8f2ac048dd024f67773bce4317f7d20c75c73

    • SSDEEP

      3072:JW6dm9tS1aRGQdK76t/zCxI5mrThPaLEnvPrN+:c6IG+LC2mrThPaLEnvPrN+

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks