Overview

overview

10

Static

static

10

fc592317bb...eb.elf

ubuntu-20.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    fc592317bb381d23e0c54e6bcaf8c3eb.elf

  • Size

    101KB

  • Sample

    240222-1m7pesfh59

  • MD5

    fc592317bb381d23e0c54e6bcaf8c3eb

  • SHA1

    2d8bf29d99109cef47d598951ef08ae4b2fa3d19

  • SHA256

    35b7a482925d541f2b00c75f4e20dc917812c6406ae3871f0d90766c02e777bd

  • SHA512

    7a8b609d5de0a8d45bc8a0f6c0e64417c771ea499ed065c00bc0a2419f5a3b3587efab7797828a23be51fba2d04b6692f3b66dba0085a545ab1f848cafd2e77f

  • SSDEEP

    3072:SOGAEtZoGZKWl6u4YTnbHmbimmFVcqq0G27ZT:SqEtZ755nbHmbimmFVcqq0G27ZT

Score
10/10
gafgytlinux

Malware Config

Targets

    • Target

      fc592317bb381d23e0c54e6bcaf8c3eb.elf

    • Size

      101KB

    • MD5

      fc592317bb381d23e0c54e6bcaf8c3eb

    • SHA1

      2d8bf29d99109cef47d598951ef08ae4b2fa3d19

    • SHA256

      35b7a482925d541f2b00c75f4e20dc917812c6406ae3871f0d90766c02e777bd

    • SHA512

      7a8b609d5de0a8d45bc8a0f6c0e64417c771ea499ed065c00bc0a2419f5a3b3587efab7797828a23be51fba2d04b6692f3b66dba0085a545ab1f848cafd2e77f

    • SSDEEP

      3072:SOGAEtZoGZKWl6u4YTnbHmbimmFVcqq0G27ZT:SqEtZ755nbHmbimmFVcqq0G27ZT

    Score
    7/10

    • Changes its process name

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks