Overview

overview

10

Static

static

10

mipsel.elf

debian-12-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mipsel.elf

  • Size

    151KB

  • Sample

    241128-wak8fazphj

  • MD5

    86ea06ad218a6ca4e51395ef27e41e6c

  • SHA1

    e896de83f0182465a978d5dd1b98db026da681dc

  • SHA256

    19897b721dc0c6dd554f3e97fe2e8792a18c0511ec0f447e9510a01b49aead16

  • SHA512

    1c7396c6277613500977cc9980b4194cc8aeed7fccaee988578b3e808a5978d9aa2ea40e96ec1fd9da6b0929e22c30e925bb18a2d07ca11d8cce56c7df0782ee

  • SSDEEP

    3072:dgZc9h1jlnLA2PiXYeyCcrVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZrVWDo9mrThPaLEnvP5

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      mipsel.elf

    • Size

      151KB

    • MD5

      86ea06ad218a6ca4e51395ef27e41e6c

    • SHA1

      e896de83f0182465a978d5dd1b98db026da681dc

    • SHA256

      19897b721dc0c6dd554f3e97fe2e8792a18c0511ec0f447e9510a01b49aead16

    • SHA512

      1c7396c6277613500977cc9980b4194cc8aeed7fccaee988578b3e808a5978d9aa2ea40e96ec1fd9da6b0929e22c30e925bb18a2d07ca11d8cce56c7df0782ee

    • SSDEEP

      3072:dgZc9h1jlnLA2PiXYeyCcrVNMVGuo9mrThPaLEnvPrNb:dd7lnLA2PiIeyZrVWDo9mrThPaLEnvP5

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks