Overview

overview

10

Static

static

10

395d262d1c...763734

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    395d262d1c22e57c5d44f2028f763734

  • Size

    126KB

  • Sample

    231231-rh9tjsbggp

  • MD5

    395d262d1c22e57c5d44f2028f763734

  • SHA1

    9e862246148b6a59210d3ca41a5c4abc1820a000

  • SHA256

    6b70b73f2402a014eaf5e2d64d14ff6009bb853eba66767447c5522542241522

  • SHA512

    059e5558413775936e77ebc67e258155d6493d65f6cb87f747ecc4e88542b99a8be40a209cf36bd4158612bcd3637d87470b09cdc229d704bec4d762ef985ac1

  • SSDEEP

    3072:6jVlyaL5JCrIpv04sLbstiEiJmP46aQyfPluesNb:yoCJCN4sLb8YmP46aQyfPluesNb

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      395d262d1c22e57c5d44f2028f763734

    • Size

      126KB

    • MD5

      395d262d1c22e57c5d44f2028f763734

    • SHA1

      9e862246148b6a59210d3ca41a5c4abc1820a000

    • SHA256

      6b70b73f2402a014eaf5e2d64d14ff6009bb853eba66767447c5522542241522

    • SHA512

      059e5558413775936e77ebc67e258155d6493d65f6cb87f747ecc4e88542b99a8be40a209cf36bd4158612bcd3637d87470b09cdc229d704bec4d762ef985ac1

    • SSDEEP

      3072:6jVlyaL5JCrIpv04sLbstiEiJmP46aQyfPluesNb:yoCJCN4sLb8YmP46aQyfPluesNb

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks