Overview

overview

7

Static

static

1

72c07b1403...abc99b

ubuntu-18.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    72c07b14033b0436356d4d8c86abc99b

  • Size

    32KB

  • Sample

    240124-w8lxmafegq

  • MD5

    72c07b14033b0436356d4d8c86abc99b

  • SHA1

    da082dc69b94c56a992c71312ad7d29d21e8a7ac

  • SHA256

    702b6e7833992bf77092b4358cf2fb3719ea4cd681074d3769cde3198303dafe

  • SHA512

    54e4ca28902a77ecd48fa1ac5496c212c74727f5e986213ecd6d28948c6580a931b21487d30a9ebc67c847007af07f216ea5738477954e9a5d37d4a01cddd62f

  • SSDEEP

    768:tfCytboqqzT/qCf0/tMdBnbcuyD7UryqK:tfCyaqWUKBnouy8mqK

Score
7/10
linux

Malware Config

Targets

    • Target

      72c07b14033b0436356d4d8c86abc99b

    • Size

      32KB

    • MD5

      72c07b14033b0436356d4d8c86abc99b

    • SHA1

      da082dc69b94c56a992c71312ad7d29d21e8a7ac

    • SHA256

      702b6e7833992bf77092b4358cf2fb3719ea4cd681074d3769cde3198303dafe

    • SHA512

      54e4ca28902a77ecd48fa1ac5496c212c74727f5e986213ecd6d28948c6580a931b21487d30a9ebc67c847007af07f216ea5738477954e9a5d37d4a01cddd62f

    • SSDEEP

      768:tfCytboqqzT/qCf0/tMdBnbcuyD7UryqK:tfCyaqWUKBnouy8mqK

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks