Overview

overview

10

Static

static

10

5ac7d41ad6...kes118

ubuntu-18.04-amd64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5ac7d41ad646c1d305b014ca0ef3a544_JaffaCakes118

  • Size

    1.1MB

  • Sample

    240729-x1a1tszfme

  • MD5

    5ac7d41ad646c1d305b014ca0ef3a544

  • SHA1

    46a8e3e70e0b8e1ac1b70074b502343a4c4dc8b0

  • SHA256

    c18ea407518d1556077a6d050a84ab0c4617cc61e813cee4ba1d89255e81f63d

  • SHA512

    45aa041b21bea8f1ea2a99af19ee8e467deaf2cdbdb857af193e2c07e4fd5fe7d6a2002a5d642073bb231c96cf09dad67b529dd86cbf69252d15c725d70cc5a1

  • SSDEEP

    24576:4vRE7caCfKGPqVEDNLFxKsfazI+gIGYuuCol7r:4vREKfPqVE5jKsfazRHGVo7r

Score
10/10
mrblackantivmbotnetlinuxpersistencetrojan

Malware Config

Targets

    • Target

      5ac7d41ad646c1d305b014ca0ef3a544_JaffaCakes118

    • Size

      1.1MB

    • MD5

      5ac7d41ad646c1d305b014ca0ef3a544

    • SHA1

      46a8e3e70e0b8e1ac1b70074b502343a4c4dc8b0

    • SHA256

      c18ea407518d1556077a6d050a84ab0c4617cc61e813cee4ba1d89255e81f63d

    • SHA512

      45aa041b21bea8f1ea2a99af19ee8e467deaf2cdbdb857af193e2c07e4fd5fe7d6a2002a5d642073bb231c96cf09dad67b529dd86cbf69252d15c725d70cc5a1

    • SSDEEP

      24576:4vRE7caCfKGPqVEDNLFxKsfazI+gIGYuuCol7r:4vREKfPqVE5jKsfazRHGVo7r

    Score
    10/10
    mrblackantivmbotnetpersistencetrojan

    • MrBlack Trojan

      IoT botnet which infects routers to be used for DDoS attacks.

      trojanbotnetmrblack

    • MrBlack trojan

    • Executes dropped EXE

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

      persistence

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

    • Write file to user bin folder

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks