General

  • Target

    arm61.elf

  • Size

    174KB

  • Sample

    241110-k3bzpatekq

  • MD5

    1c9051c3a48064e1785f8ef8a601253a

  • SHA1

    78ead191b88ff9ce55b964cf6d80cc3d6c385aa0

  • SHA256

    a5f91ba6058f3a8a90b81345ab0833dc9157c7ed7bfc283de12cb0dbdf3c6358

  • SHA512

    380bb5343012b2d7d2b648e00d9753a4fada85aadad2b3ad6dda1d06675a1bcb32eee99404a1994bf1665e1c78ac79264a1314663d0a278844afa4b02aa48f4b

  • SSDEEP

    3072:wuadAFdMTaMirPVDoUSXd7f+5B+OwfkmexV7t5OGNmGwxM8QURH:w3AwTaMirP9ol1f+H+Ow8lxV7SGNmGwV

Score
10/10

Malware Config

Extracted

Family

gafgyt

C2

209.141.54.46:23

Targets

    • Target

      arm61.elf

    • Size

      174KB

    • MD5

      1c9051c3a48064e1785f8ef8a601253a

    • SHA1

      78ead191b88ff9ce55b964cf6d80cc3d6c385aa0

    • SHA256

      a5f91ba6058f3a8a90b81345ab0833dc9157c7ed7bfc283de12cb0dbdf3c6358

    • SHA512

      380bb5343012b2d7d2b648e00d9753a4fada85aadad2b3ad6dda1d06675a1bcb32eee99404a1994bf1665e1c78ac79264a1314663d0a278844afa4b02aa48f4b

    • SSDEEP

      3072:wuadAFdMTaMirPVDoUSXd7f+5B+OwfkmexV7t5OGNmGwxM8QURH:w3AwTaMirP9ol1f+H+Ow8lxV7SGNmGwV

    Score
    7/10
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

MITRE ATT&CK Enterprise v15

Tasks