General

  • Target

    MDFZw2U0Ighb3bI9K2SX7ce4TvmxPbklXP.elf

  • Size

    80KB

  • Sample

    240817-rwvxjstcrq

  • MD5

    3a85bc69085b304f5162f8ad164d5acb

  • SHA1

    ebde0c8839778879a744ebad7e0a077f23cf601d

  • SHA256

    04534d86dde85253ce783ebfe6811f7fae50e704196a0d756afa3761d1d697fd

  • SHA512

    2315455c76082df3cb030dac18ceff47fbfac1154eadc42e58cb42196c9cdd17d5ed524893a0e80a984ebfb4f009b1b4061afb52a2cb16d38d2a58e49ec5010b

  • SSDEEP

    1536:ROUzKVotw2uYh6g+FB3SYFjgaiZBflluFh1bSzLm9xX/X/LA7MpzX:ROUzKVotw2uYYg+FB37FBc9s1bSzLmPR

Score
7/10

Malware Config

Targets

    • Target

      MDFZw2U0Ighb3bI9K2SX7ce4TvmxPbklXP.elf

    • Size

      80KB

    • MD5

      3a85bc69085b304f5162f8ad164d5acb

    • SHA1

      ebde0c8839778879a744ebad7e0a077f23cf601d

    • SHA256

      04534d86dde85253ce783ebfe6811f7fae50e704196a0d756afa3761d1d697fd

    • SHA512

      2315455c76082df3cb030dac18ceff47fbfac1154eadc42e58cb42196c9cdd17d5ed524893a0e80a984ebfb4f009b1b4061afb52a2cb16d38d2a58e49ec5010b

    • SSDEEP

      1536:ROUzKVotw2uYh6g+FB3SYFjgaiZBflluFh1bSzLm9xX/X/LA7MpzX:ROUzKVotw2uYYg+FB37FBc9s1bSzLmPR

    Score
    7/10
    • Renames itself

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks