Overview

overview

10

Static

static

10

7dfddbe001...f7.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7dfddbe0019dd2f64e1e1aec3306a0f7.elf

  • Size

    106KB

  • Sample

    240125-rp5heaabek

  • MD5

    7dfddbe0019dd2f64e1e1aec3306a0f7

  • SHA1

    2d82bc78279409819cfcd505d574dacb0e57552e

  • SHA256

    63cae3a6d7a09888a54f8399cc3ef68a3e768cb6859b8c39dace429cfa7a32b8

  • SHA512

    8ccefbd4d076d29e14284eadd25d1d6c5f79fc52784dcef68da6dc4b3e738a6cd3ac6804220b403bad9b0f755be9dddfbd766c3a05d5e10f3d2971e901d1e59b

  • SSDEEP

    1536:tycRu5KTSWRX5h5PTa9GGSHs3FbR8Tzo1hmA3024pgR1sEhYueiuBLNcHhs4YOXn:kIxlP+9GG53W24E1sEhsBhvHDf

Score
10/10
mirai

Malware Config

Targets

    • Target

      7dfddbe0019dd2f64e1e1aec3306a0f7.elf

    • Size

      106KB

    • MD5

      7dfddbe0019dd2f64e1e1aec3306a0f7

    • SHA1

      2d82bc78279409819cfcd505d574dacb0e57552e

    • SHA256

      63cae3a6d7a09888a54f8399cc3ef68a3e768cb6859b8c39dace429cfa7a32b8

    • SHA512

      8ccefbd4d076d29e14284eadd25d1d6c5f79fc52784dcef68da6dc4b3e738a6cd3ac6804220b403bad9b0f755be9dddfbd766c3a05d5e10f3d2971e901d1e59b

    • SSDEEP

      1536:tycRu5KTSWRX5h5PTa9GGSHs3FbR8Tzo1hmA3024pgR1sEhYueiuBLNcHhs4YOXn:kIxlP+9GG53W24E1sEhsBhvHDf

    Score
    7/10

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks