General

  • Target

    ecf2fbffa78bb130a11fe2ab3babf16b

  • Size

    59KB

  • Sample

    231220-vas3lsfecl

  • MD5

    ecf2fbffa78bb130a11fe2ab3babf16b

  • SHA1

    b2015bd750b4dda7aa407ed638252bae40ae6992

  • SHA256

    3e9267429ae0f50f270842d677bf0b9f9c149c34ac021c5b3e17eea96ccff1dd

  • SHA512

    2072d8f164af7bb38d221475cb0bc15a143ff5bc5022c4208e06f1aa15ecbd02d3d848aeaceb3ba9015eb2727c0ae0d8485ebfe5d1efaa068427efb763a38aad

  • SSDEEP

    1536:dah3sb7XZX8VAz4m9hvPBpdmLyLFZs1mIQ0qnsrxt+hx:chcb7XZoAz4m9h3B2GLF+EIAnsrqr

Score
7/10
upx

Malware Config

Targets

    • Target

      ecf2fbffa78bb130a11fe2ab3babf16b

    • Size

      59KB

    • MD5

      ecf2fbffa78bb130a11fe2ab3babf16b

    • SHA1

      b2015bd750b4dda7aa407ed638252bae40ae6992

    • SHA256

      3e9267429ae0f50f270842d677bf0b9f9c149c34ac021c5b3e17eea96ccff1dd

    • SHA512

      2072d8f164af7bb38d221475cb0bc15a143ff5bc5022c4208e06f1aa15ecbd02d3d848aeaceb3ba9015eb2727c0ae0d8485ebfe5d1efaa068427efb763a38aad

    • SSDEEP

      1536:dah3sb7XZX8VAz4m9hvPBpdmLyLFZs1mIQ0qnsrxt+hx:chcb7XZoAz4m9h3B2GLF+EIAnsrqr

    Score
    7/10
    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

MITRE ATT&CK Enterprise v15

Tasks