Overview

overview

7

Static

static

1

arm7.elf

debian-9-armhf

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    arm7.elf

  • Size

    458KB

  • Sample

    241008-zhj7wsvbkj

  • MD5

    d7be90ea6766445e051346593f8bf10e

  • SHA1

    c8ffc5f57eb1b5ef39c5d4cb27520765edbcffba

  • SHA256

    c34d78534c9998ef1b6fce23ee18032de5ec38b9e647ae2ac604a98d6d00f579

  • SHA512

    bd5791a45c900883f145ef8464a2533a91a8674ae3472c592e420727effa0362364884c189ff401612f302d611fe476d2147e6a3dc0ba3c82b41d3fcbb04190a

  • SSDEEP

    12288:dltnEvrombLYLGOBzlWVCvMPsX4xIe/8pQqCDZ:dlgsmbCzqCOsfC

Score
7/10
defense_evasion

Malware Config

Targets

    • Target

      arm7.elf

    • Size

      458KB

    • MD5

      d7be90ea6766445e051346593f8bf10e

    • SHA1

      c8ffc5f57eb1b5ef39c5d4cb27520765edbcffba

    • SHA256

      c34d78534c9998ef1b6fce23ee18032de5ec38b9e647ae2ac604a98d6d00f579

    • SHA512

      bd5791a45c900883f145ef8464a2533a91a8674ae3472c592e420727effa0362364884c189ff401612f302d611fe476d2147e6a3dc0ba3c82b41d3fcbb04190a

    • SSDEEP

      12288:dltnEvrombLYLGOBzlWVCvMPsX4xIe/8pQqCDZ:dlgsmbCzqCOsfC

    Score
    7/10
    defense_evasion

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks