General

  • Target
    linux_mipsel_softfloat.elf
  • Size 5.6MB
  • Sample241027-2zd4baskbk
  • SHA256 58057558451548f7cda81b67e915f7143683e98ac7a938d78ec620140c9991a6
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Targets

    • Target
      linux_mipsel_softfloat.elf
    • Size 5.6MB
    • SHA256 58057558451548f7cda81b67e915f7143683e98ac7a938d78ec620140c9991a6
    • MD5 SHA1 SHA512 SSDEEP
    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

    • Modifies systemd

      Adds/ modifies systemd service files. Likely to achieve persistence.

MITRE ATT&CK Enterprise v15

Tasks