Overview

overview

10

Static

static

10

76ac55481e...1f867f

ubuntu-18.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    76ac55481e86a67887fa840f461f867f

  • Size

    101KB

  • Sample

    240126-hll28agca2

  • MD5

    76ac55481e86a67887fa840f461f867f

  • SHA1

    5aeec9dfb5928ce4faef2f392a2a8c666b67b9a7

  • SHA256

    6c55ce26bac4ab2c46571ef036b55d414bf1fbb29f350dbe560dde3c6db96cc4

  • SHA512

    ca6de6067a3063efc9d8f1bb6d51521f13d6132b12b225005e639094549a6b63a5ff10836e7ce19b04c887b8b703a81ce3e2bac50ea57ef5c82cc13ce7aeebb3

  • SSDEEP

    3072:wW8FUmgujld6Mkxm6AJ+4fQSHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fQSHmmFVcqq0GnDZT

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      76ac55481e86a67887fa840f461f867f

    • Size

      101KB

    • MD5

      76ac55481e86a67887fa840f461f867f

    • SHA1

      5aeec9dfb5928ce4faef2f392a2a8c666b67b9a7

    • SHA256

      6c55ce26bac4ab2c46571ef036b55d414bf1fbb29f350dbe560dde3c6db96cc4

    • SHA512

      ca6de6067a3063efc9d8f1bb6d51521f13d6132b12b225005e639094549a6b63a5ff10836e7ce19b04c887b8b703a81ce3e2bac50ea57ef5c82cc13ce7aeebb3

    • SSDEEP

      3072:wW8FUmgujld6Mkxm6AJ+4fQSHmmFVcqq0GnDZT:wJFv4Lm6AJ+4fQSHmmFVcqq0GnDZT

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks