Overview

overview

10

Static

static

10

b4db85c88b...9b0195

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4db85c88bea67709ac3b44fe59b0195

  • Size

    155KB

  • Sample

    240305-q7b35sgc8x

  • MD5

    b4db85c88bea67709ac3b44fe59b0195

  • SHA1

    c569639e070f071c3d4f9133eb08b62ed85b9aa2

  • SHA256

    865052a47af1e93ef0ee7c530894e21da8cc58578cfe7ab6a7500b40d18ba2e9

  • SHA512

    bd43f6d9f84e9888a8e5cd9ee3d398918a0686ca5bf30891b9a102483f7d88dd85a3741ecb6d1d4703127b624c7a164ac4d4d64fb8e1285dbcae976973f30051

  • SSDEEP

    3072:B7esBFP23rWfOB7ZOOyGyWKmrThPaLEne7rNb:1euCloGyrmrThPaLEne7rNb

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      b4db85c88bea67709ac3b44fe59b0195

    • Size

      155KB

    • MD5

      b4db85c88bea67709ac3b44fe59b0195

    • SHA1

      c569639e070f071c3d4f9133eb08b62ed85b9aa2

    • SHA256

      865052a47af1e93ef0ee7c530894e21da8cc58578cfe7ab6a7500b40d18ba2e9

    • SHA512

      bd43f6d9f84e9888a8e5cd9ee3d398918a0686ca5bf30891b9a102483f7d88dd85a3741ecb6d1d4703127b624c7a164ac4d4d64fb8e1285dbcae976973f30051

    • SSDEEP

      3072:B7esBFP23rWfOB7ZOOyGyWKmrThPaLEne7rNb:1euCloGyrmrThPaLEne7rNb

    Score
    7/10

    • Changes its process name

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks