Overview

overview

10

Static

static

10

shindeVarm...25.elf

debian-12-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    shindeVarm7-20240707-0425.elf

  • Size

    125KB

  • Sample

    240707-e2hsyswdkc

  • MD5

    4a2257eb98a18dd90bc91ac8435093ae

  • SHA1

    5615fd922cc3dd47e3a526701443f3417d9342ce

  • SHA256

    b72250effb80362c27cc3edfc77bd224f02b7c9f13c4fde0d05f86c60561ff0d

  • SHA512

    f3f94911e43f77885e3134a2abca3613fa5714a14ae40adc750b62c0f83b195a7eda447c14ea7a5dd2b90ef88a293d26c73c721d637bb4b61ce1dbba9841aff5

  • SSDEEP

    3072:fisNEds57p6USzkPIxNHmMAfCRRaM/9mTuBgqf:KsNOG7p6USzk8NkfCR4M/9m6yC

Score
10/10
mirai

Malware Config

Targets

    • Target

      shindeVarm7-20240707-0425.elf

    • Size

      125KB

    • MD5

      4a2257eb98a18dd90bc91ac8435093ae

    • SHA1

      5615fd922cc3dd47e3a526701443f3417d9342ce

    • SHA256

      b72250effb80362c27cc3edfc77bd224f02b7c9f13c4fde0d05f86c60561ff0d

    • SHA512

      f3f94911e43f77885e3134a2abca3613fa5714a14ae40adc750b62c0f83b195a7eda447c14ea7a5dd2b90ef88a293d26c73c721d637bb4b61ce1dbba9841aff5

    • SSDEEP

      3072:fisNEds57p6USzkPIxNHmMAfCRRaM/9mTuBgqf:KsNOG7p6USzk8NkfCR4M/9m6yC

    Score
    7/10

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Matrix ATT&CK v13

Initial Access

Execution

Persistence

Hijack Execution Flow

1
T1574

Privilege Escalation

Hijack Execution Flow

1
T1574

Defense Evasion

Impair Defenses

1
T1562

Hijack Execution Flow

1
T1574

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Resource Development

Reconnaissance

Tasks