Overview

overview

9

Static

static

1

f6a1d4b5d9...b0.elf

debian-9-armhf

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f6a1d4b5d998c93cdfd06d47543266d93784dc59f224f0733cf3a03337abd4b0.elf

  • Size

    47KB

  • Sample

    240213-gr1bcsac8v

  • MD5

    6b38b39f60a905b3cd5ef173f4165894

  • SHA1

    03357a9343999d1643fc176e68699aa6bc57900c

  • SHA256

    f6a1d4b5d998c93cdfd06d47543266d93784dc59f224f0733cf3a03337abd4b0

  • SHA512

    50ee0bc856ca676754afe1094af392744dc1b8f77ead311a743a0b148b2786d81436864f3a4d835e9ea565cf719f2f6b14cae3f955f09530804b7542c3290369

  • SSDEEP

    768:evPT5GSzhkunudh3BI5AUT/rg32vbwLrHJtCBovtrhpVkNqBT4RZGz:YNNjAAr3c3vCBarhbAq9cU

Score
9/10
discovery

Malware Config

Targets

    • Target

      f6a1d4b5d998c93cdfd06d47543266d93784dc59f224f0733cf3a03337abd4b0.elf

    • Size

      47KB

    • MD5

      6b38b39f60a905b3cd5ef173f4165894

    • SHA1

      03357a9343999d1643fc176e68699aa6bc57900c

    • SHA256

      f6a1d4b5d998c93cdfd06d47543266d93784dc59f224f0733cf3a03337abd4b0

    • SHA512

      50ee0bc856ca676754afe1094af392744dc1b8f77ead311a743a0b148b2786d81436864f3a4d835e9ea565cf719f2f6b14cae3f955f09530804b7542c3290369

    • SSDEEP

      768:evPT5GSzhkunudh3BI5AUT/rg32vbwLrHJtCBovtrhpVkNqBT4RZGz:YNNjAAr3c3vCBarhbAq9cU

    Score
    9/10
    discovery

    • Contacts a large (38638) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks