Overview

overview

10

Static

static

10

44fbc8c69f...ca.elf

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    44fbc8c69fa4fd0844bd4003e088954d5ab6724a563af50eb094da48ab0100ca.elf

  • Size

    173KB

  • Sample

    240929-bj9beatfnq

  • MD5

    ce4d36ce9c993d38a5d4212e47827b31

  • SHA1

    9f88e605a4a13905fe3c0bf516a792e8e4e649e0

  • SHA256

    44fbc8c69fa4fd0844bd4003e088954d5ab6724a563af50eb094da48ab0100ca

  • SHA512

    3ce425878c9f03e3019273bf83bb2b1180b500f708365d3c7482fd1f3432a21eaa1ff4a1005a570f57228f65cf025fb037f0841f6b6d6964017f5010f8af50e2

  • SSDEEP

    3072:KP6xY2xamY0GJOwY9Zpo0uqt7Ph+4V7q1sKnnmUwwFBkwXNE:ECxamY0GJjYS0uU7Ph+4V7q1ZnnmUwwK

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      44fbc8c69fa4fd0844bd4003e088954d5ab6724a563af50eb094da48ab0100ca.elf

    • Size

      173KB

    • MD5

      ce4d36ce9c993d38a5d4212e47827b31

    • SHA1

      9f88e605a4a13905fe3c0bf516a792e8e4e649e0

    • SHA256

      44fbc8c69fa4fd0844bd4003e088954d5ab6724a563af50eb094da48ab0100ca

    • SHA512

      3ce425878c9f03e3019273bf83bb2b1180b500f708365d3c7482fd1f3432a21eaa1ff4a1005a570f57228f65cf025fb037f0841f6b6d6964017f5010f8af50e2

    • SSDEEP

      3072:KP6xY2xamY0GJOwY9Zpo0uqt7Ph+4V7q1sKnnmUwwFBkwXNE:ECxamY0GJjYS0uU7Ph+4V7q1ZnnmUwwK

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks