General
- Target b0d15ae15ddea91eba49906e03e65787613fcad8b190190dfde9f3cf62ee2be3.elf
- Size 5.6MB
- Sample241105-eqz8vsvemk
- SHA256 b0d15ae15ddea91eba49906e03e65787613fcad8b190190dfde9f3cf62ee2be3
Score
10/10
Malware Config
Targets
-
- Target b0d15ae15ddea91eba49906e03e65787613fcad8b190190dfde9f3cf62ee2be3.elf
- Size 5.6MB
- SHA256 b0d15ae15ddea91eba49906e03e65787613fcad8b190190dfde9f3cf62ee2be3
Score7/10-
Executes dropped EXE
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Modifies init.d
Adds/modifies system service, likely for persistence.
-
Modifies systemd
Adds/ modifies systemd service files. Likely to achieve persistence.
MITRE ATT&CK Enterprise v15
Persistence
Boot or Logon Autostart Execution
2XDG Autostart Entries
1Boot or Logon Initialization Scripts
1RC Scripts
1Create or Modify System Process
1Systemd Service
1