Overview

overview

10

Static

static

10

6c645e87b6...7a.elf

debian-9-mipsel

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    6c645e87b6350c19711a76359c947d7a.elf

  • Size

    151KB

  • Sample

    240315-v2kwbagc83

  • MD5

    6c645e87b6350c19711a76359c947d7a

  • SHA1

    0ca10a31cbae4f4c977c0907a4ace457d288acb8

  • SHA256

    bf9cb35fbddfde3f1e78ef06cb6c5fd1cbb910faddd1f5bb7c870d675c47cbd6

  • SHA512

    1507e596cfdebe9db256ce20173d6832c586a08c71cc2febf1042c061bcd2faa57186ca8f1be52fc89596b594eec2dccf4ffbf5a5b2fe65d4105456c4d4184c0

  • SSDEEP

    3072:dgZc9h1jlnLA2PiXYeyCc8VNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZ8VWDo9mrThPaLEnvP5

Score
10/10
gafgyt

Malware Config

Targets

    • Target

      6c645e87b6350c19711a76359c947d7a.elf

    • Size

      151KB

    • MD5

      6c645e87b6350c19711a76359c947d7a

    • SHA1

      0ca10a31cbae4f4c977c0907a4ace457d288acb8

    • SHA256

      bf9cb35fbddfde3f1e78ef06cb6c5fd1cbb910faddd1f5bb7c870d675c47cbd6

    • SHA512

      1507e596cfdebe9db256ce20173d6832c586a08c71cc2febf1042c061bcd2faa57186ca8f1be52fc89596b594eec2dccf4ffbf5a5b2fe65d4105456c4d4184c0

    • SSDEEP

      3072:dgZc9h1jlnLA2PiXYeyCc8VNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZ8VWDo9mrThPaLEnvP5

    Score
    7/10

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks