Overview

overview

10

Static

static

10

8ea92b72db...5538f6

debian-9-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8ea92b72db6d01571558fc60ff5538f6

  • Size

    151KB

  • Sample

    231220-h2552acch8

  • MD5

    8ea92b72db6d01571558fc60ff5538f6

  • SHA1

    b97c8870822bc43aef9675457235a54f13c67307

  • SHA256

    9bd65d3f6b9c73230bf553cd71655d70c0542f4392c09eb39bcbedcdf83d57c8

  • SHA512

    89404c681540bc10bf05e5f95e77ea306e2bd5f3c5a49747ff1ef2f039d8afd76b6ba0389967be0c4da13eab8f66c32a4804877184ccd84b029d73116aa6a5d2

  • SSDEEP

    3072:dgZc9h1jlnLA2PiXYeyCcQVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZQVWDo9mrThPaLEnvP5

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      8ea92b72db6d01571558fc60ff5538f6

    • Size

      151KB

    • MD5

      8ea92b72db6d01571558fc60ff5538f6

    • SHA1

      b97c8870822bc43aef9675457235a54f13c67307

    • SHA256

      9bd65d3f6b9c73230bf553cd71655d70c0542f4392c09eb39bcbedcdf83d57c8

    • SHA512

      89404c681540bc10bf05e5f95e77ea306e2bd5f3c5a49747ff1ef2f039d8afd76b6ba0389967be0c4da13eab8f66c32a4804877184ccd84b029d73116aa6a5d2

    • SSDEEP

      3072:dgZc9h1jlnLA2PiXYeyCcQVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZQVWDo9mrThPaLEnvP5

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks