Overview

overview

7

Static

static

1

43ddbd8694...886270

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    43ddbd8694f4a4a0c6af1b5523886270

  • Size

    38KB

  • Sample

    240105-ra6rxsdcgl

  • MD5

    43ddbd8694f4a4a0c6af1b5523886270

  • SHA1

    315c073bad27c52c6ae0b7614db92c0a0ba354e5

  • SHA256

    20699086b527dbc779867c4559fe81fbce03ee1cc800fde1fe75016cc8e1dfd4

  • SHA512

    bf8d324a64a2af00221f516a0d9405bf810e5c00d199262db5e08ad030b96d92969f3f3f46e17899364fd3b770d5eeb1631d42ab26e716c41ccbca34021fb50b

  • SSDEEP

    768:N/34PtWoiTiBDttkTm4xuzT+eg6ujhmGTGDWbyLnFuMtRTxzilRLCQH8gLJHC9me:Ng0opdtGPuzTsTjhmM4nVRTorpHJ9HE3

Score
7/10

Malware Config

Targets

    • Target

      43ddbd8694f4a4a0c6af1b5523886270

    • Size

      38KB

    • MD5

      43ddbd8694f4a4a0c6af1b5523886270

    • SHA1

      315c073bad27c52c6ae0b7614db92c0a0ba354e5

    • SHA256

      20699086b527dbc779867c4559fe81fbce03ee1cc800fde1fe75016cc8e1dfd4

    • SHA512

      bf8d324a64a2af00221f516a0d9405bf810e5c00d199262db5e08ad030b96d92969f3f3f46e17899364fd3b770d5eeb1631d42ab26e716c41ccbca34021fb50b

    • SSDEEP

      768:N/34PtWoiTiBDttkTm4xuzT+eg6ujhmGTGDWbyLnFuMtRTxzilRLCQH8gLJHC9me:Ng0opdtGPuzTsTjhmM4nVRTorpHJ9HE3

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks