General

  • Target

    linux_mipsel_softfloat.elf

  • Size

    5.6MB

  • Sample

    241027-z5ldgazqal

  • MD5

    6a2b3d8543d913158f65c0721b8e1ddf

  • SHA1

    9f82c3e1aa34b39b9ef47cfca1aa74b3652bc332

  • SHA256

    58057558451548f7cda81b67e915f7143683e98ac7a938d78ec620140c9991a6

  • SHA512

    2d4fd26550989b16cf1ef5e199c66866c5a87b0ee98b762184f1ff264edfe030cac448059d49c371b09cdd70e0b31eb8242dbfb3b7388f4679198d013c000001

  • SSDEEP

    49152:+RxVVRFMTwdupkYzfgh7rxQ2USaU85Jbq1rQcR6VYv0VF1:

Malware Config

Targets

    • Target

      linux_mipsel_softfloat.elf

    • Size

      5.6MB

    • MD5

      6a2b3d8543d913158f65c0721b8e1ddf

    • SHA1

      9f82c3e1aa34b39b9ef47cfca1aa74b3652bc332

    • SHA256

      58057558451548f7cda81b67e915f7143683e98ac7a938d78ec620140c9991a6

    • SHA512

      2d4fd26550989b16cf1ef5e199c66866c5a87b0ee98b762184f1ff264edfe030cac448059d49c371b09cdd70e0b31eb8242dbfb3b7388f4679198d013c000001

    • SSDEEP

      49152:+RxVVRFMTwdupkYzfgh7rxQ2USaU85Jbq1rQcR6VYv0VF1:

    • Executes dropped EXE

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Modifies init.d

      Adds/modifies system service, likely for persistence.

MITRE ATT&CK Enterprise v15

Tasks