General

  • Target

    1ee487e4bb8d22d8d89e5aec0ac82e7b.elf

  • Size

    69KB

  • Sample

    240421-aebc5sdf47

  • MD5

    1ee487e4bb8d22d8d89e5aec0ac82e7b

  • SHA1

    9c1d38c64e7518dedec41973ebb834b2ff003099

  • SHA256

    60de06460220194c61ea0796cf34274334b0c33fd2ad399dd38f03b1c3652284

  • SHA512

    6684786746236958c8385f96a8eaa747dc3d5d5ec083f1dd0d1767a2442afcb286626084187bca42402c263bdd8875b9ac45ec9dde7208811bb7e9619bf75543

  • SSDEEP

    1536:n5wCO0IEO1ZIvZgfZW4jwDSoBwiegTPUW0aLpXPkbnPtRn:n5wCO/EO1Gv2U4jMSqMKB3LpXPAPT

Score
10/10

Malware Config

Targets

    • Target

      1ee487e4bb8d22d8d89e5aec0ac82e7b.elf

    • Size

      69KB

    • MD5

      1ee487e4bb8d22d8d89e5aec0ac82e7b

    • SHA1

      9c1d38c64e7518dedec41973ebb834b2ff003099

    • SHA256

      60de06460220194c61ea0796cf34274334b0c33fd2ad399dd38f03b1c3652284

    • SHA512

      6684786746236958c8385f96a8eaa747dc3d5d5ec083f1dd0d1767a2442afcb286626084187bca42402c263bdd8875b9ac45ec9dde7208811bb7e9619bf75543

    • SSDEEP

      1536:n5wCO0IEO1ZIvZgfZW4jwDSoBwiegTPUW0aLpXPkbnPtRn:n5wCO/EO1Gv2U4jMSqMKB3LpXPAPT

    Score
    7/10
    • Deletes Audit logs

      Deletes logs related to the Linux Audit framework.

    • Deletes itself

    • Deletes journal logs

      Deletes systemd journal logs. Likely to evade detection.

    • Deletes system logs

      Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Deletes log files

      Deletes log files on the system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Matrix ATT&CK v13

Defense Evasion

Indicator Removal

4
T1070

Impair Defenses

1
T1562

Tasks