Overview

overview

10

Static

static

10

5e243f9c40...5b.elf

ubuntu-18.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b.elf

  • Size

    97KB

  • Sample

    240108-zmg84aahhj

  • MD5

    ed8f80a1e4afaf813fe292232961aa03

  • SHA1

    e7f47fa6268d934379b068c7bfbbd262d7b74317

  • SHA256

    5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b

  • SHA512

    1b8fd7c0db6caaaf89b4479ffa9ecb583ed8b42c8b0504606efe3dbe6af4779a1954bf3a433ce3ebcb13f2b5e6adc5cc87fc9275f709790a9db4fdb2d04b4558

  • SSDEEP

    3072:VK1z13U6HzHoXRtmTUhQog+EmmFVcqq0GnDZT:VK7DDeKlog+EmmFVcqq0GnDZT

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b.elf

    • Size

      97KB

    • MD5

      ed8f80a1e4afaf813fe292232961aa03

    • SHA1

      e7f47fa6268d934379b068c7bfbbd262d7b74317

    • SHA256

      5e243f9c409fe775f51c874d4c71aa99b5520881f0bfefefb57a8985222b585b

    • SHA512

      1b8fd7c0db6caaaf89b4479ffa9ecb583ed8b42c8b0504606efe3dbe6af4779a1954bf3a433ce3ebcb13f2b5e6adc5cc87fc9275f709790a9db4fdb2d04b4558

    • SSDEEP

      3072:VK1z13U6HzHoXRtmTUhQog+EmmFVcqq0GnDZT:VK7DDeKlog+EmmFVcqq0GnDZT

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks