Extracted

• • Target
    linux_386.elf
  • Size 5.0MB
  • SHA256 0c1c800bbbce56afc46ceccc33b8e703d6f43673c92c07a43d2e980d0e427bde
  • MD5 248846ad88fdaccddece36b05811a576
  • SHA1 2dac57a664c60e1dbe1b51bd75b74ab7980bff30
  • SHA512 0923b7b888aa9e15cff490093f2b626ed864e11cd1b31dc6e52b633dc1a054e2eb211b96a033ecbe9455ce93469ffa625037125e20ad400e619188ab766e898e
  • SSDEEP 49152:E33d0lGt6UHcFL7Rn2o03wiEhiDmzzd/9sARlBs/00Cpfx9a9uNNp9hW16klbU6V:E33GlbU8FwmzzRDZ9maqRV
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  kaijidefense_evasiondiscoveryexecutionpersistenceprivilege_escalatioprivilege_escalation

  • Kaiji

    Kaiji payload

  • Kaiji family

    kaiji

  • kaiji_chaosbot

    Chaos-variant payload

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalatio

  • Creates/modifies environment variables

    Creating/modifying environment variables is a common persistence mechanism.

    persistenceprivilege_escalationdefense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d

    Adds/modifies system service, likely for persistence.

    persistence

  • Write file to user bin folder

    persistence

  • Modifies Bash startup script

    persistence
  behavioral1