Overview

overview

7

Static

static

5

f8754a8280...92.elf

debian-12-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    f8754a8280f98a8f15a4992f5771fc63da182bacaea589facd8914f2ad6e5192.elf

  • Size

    17KB

  • Sample

    241121-kvfmxavndk

  • MD5

    a14e34af2ca3a15b5172fa3dc8482878

  • SHA1

    2e6d2e95e0f7a6e36b9e934762e516d7846b94cd

  • SHA256

    f8754a8280f98a8f15a4992f5771fc63da182bacaea589facd8914f2ad6e5192

  • SHA512

    cdd2fd84db7e29a58007be9a7d7b5b56fe1c40b4fd92cb78644db59d3687ccc670d30b81106c2fdd9e38f42f9526ba9221b9cdd4dbf495fc9fcb1dc0701af069

  • SSDEEP

    384:IMtYARypnxXWhrVMB6Y7SaL9lYgVgHAq8RTANMNbyFjwJq3l2B5v:vIVxXUgSev2HAXRTk4yW4k5v

Score
7/10
defense_evasionupx

Malware Config

Targets

    • Target

      f8754a8280f98a8f15a4992f5771fc63da182bacaea589facd8914f2ad6e5192.elf

    • Size

      17KB

    • MD5

      a14e34af2ca3a15b5172fa3dc8482878

    • SHA1

      2e6d2e95e0f7a6e36b9e934762e516d7846b94cd

    • SHA256

      f8754a8280f98a8f15a4992f5771fc63da182bacaea589facd8914f2ad6e5192

    • SHA512

      cdd2fd84db7e29a58007be9a7d7b5b56fe1c40b4fd92cb78644db59d3687ccc670d30b81106c2fdd9e38f42f9526ba9221b9cdd4dbf495fc9fcb1dc0701af069

    • SSDEEP

      384:IMtYARypnxXWhrVMB6Y7SaL9lYgVgHAq8RTANMNbyFjwJq3l2B5v:vIVxXUgSev2HAXRTk4yW4k5v

    Score
    7/10
    defense_evasion

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks