Overview

overview

9

Static

static

1

mips.elf

debian-9-mips

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mips.elf

  • Size

    98KB

  • Sample

    241017-rdbe7azgpe

  • MD5

    6ce51e0e686edc3c954f87d0dfa06d09

  • SHA1

    5b995183565dfc6624a3030beba88e3984e0dbc5

  • SHA256

    081f866e476cfaf0f376dd4f77b7fdb7145fc4d0714e07ca663699e4ae92ed58

  • SHA512

    b04f07a47e834dd439f47d655b6eed8b9c77cc1ac1d79f39b12a35c3e0b7b2051db5a16205c8a806b512bef1ca759c0776e8e3907eb2ed7785e2f448eee24549

  • SSDEEP

    1536:1I8hM9+7+VEqniQeC3/P0eZ4CNSxhoUDFQBjoqiSCsDsQ4Hylj2H5TTK9eHkboG:C9i+MjCcLU0qiSUylyH5TGTbV

Score
9/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      mips.elf

    • Size

      98KB

    • MD5

      6ce51e0e686edc3c954f87d0dfa06d09

    • SHA1

      5b995183565dfc6624a3030beba88e3984e0dbc5

    • SHA256

      081f866e476cfaf0f376dd4f77b7fdb7145fc4d0714e07ca663699e4ae92ed58

    • SHA512

      b04f07a47e834dd439f47d655b6eed8b9c77cc1ac1d79f39b12a35c3e0b7b2051db5a16205c8a806b512bef1ca759c0776e8e3907eb2ed7785e2f448eee24549

    • SSDEEP

      1536:1I8hM9+7+VEqniQeC3/P0eZ4CNSxhoUDFQBjoqiSCsDsQ4Hylj2H5TTK9eHkboG:C9i+MjCcLU0qiSUylyH5TGTbV

    Score
    9/10
    defense_evasiondiscovery

    • Contacts a large (222364) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks