Overview

overview

10

Static

static

10

0dab661ec0...5243d3

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    0dab661ec04ea28d9e2dbde13c5243d3

  • Size

    122KB

  • Sample

    231230-ejptjsahh2

  • MD5

    0dab661ec04ea28d9e2dbde13c5243d3

  • SHA1

    c69752e22652a4967810a015f35c3ef56a28b0d2

  • SHA256

    f91fa2d20ea4b48c52e3c53a3d13961afd9b4979d4c4f5f26c971139bbe4ba5b

  • SHA512

    cb236f260b351103016d99049246112a8e10e6d8feae9b4fd4c74a81d0273f031e151d32e5d16c03b129ee64155d2e2338c06f2043c32bbf1b01e4357bf2ba11

  • SSDEEP

    3072:4jDy/+mh1vtbPIKaPbpcUPium7/L7QsvmGfIiNb:mOJ1vxfaPbywm7/L7QsvmGfIiNb

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      0dab661ec04ea28d9e2dbde13c5243d3

    • Size

      122KB

    • MD5

      0dab661ec04ea28d9e2dbde13c5243d3

    • SHA1

      c69752e22652a4967810a015f35c3ef56a28b0d2

    • SHA256

      f91fa2d20ea4b48c52e3c53a3d13961afd9b4979d4c4f5f26c971139bbe4ba5b

    • SHA512

      cb236f260b351103016d99049246112a8e10e6d8feae9b4fd4c74a81d0273f031e151d32e5d16c03b129ee64155d2e2338c06f2043c32bbf1b01e4357bf2ba11

    • SSDEEP

      3072:4jDy/+mh1vtbPIKaPbpcUPium7/L7QsvmGfIiNb:mOJ1vxfaPbywm7/L7QsvmGfIiNb

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks