Overview

overview

10

Static

static

10

6f29956515...6b.elf

ubuntu-22.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6f299565151e872c9d55151d0265c1845b2e5c9a02fb3c2c8d44559ed1b0e86b.elf

  • Size

    113KB

  • Sample

    241129-d1lb1ssnay

  • MD5

    047030c9d649859a053f6aa16a124c91

  • SHA1

    39cb075782f34e9ea69ac864080661546fd81a2d

  • SHA256

    6f299565151e872c9d55151d0265c1845b2e5c9a02fb3c2c8d44559ed1b0e86b

  • SHA512

    7edf36d6398ea0ca07094e3603c412b3a4d95bd1eb27aba38b6172c9118c7bb0265c19d10084c47199f300b286c4312066e48f3274f084a6ad9cab869c009bfb

  • SSDEEP

    3072:kiry859a2ADJf9wHYqbgFFo8+HeAt+TRCm7FnVqfJXFWbNb:T9a2aLqkrMgsm7FnVqfJXFWbNb

Score
10/10
gafgytdefense_evasiondiscoverylinux

Malware Config

Targets

    • Target

      6f299565151e872c9d55151d0265c1845b2e5c9a02fb3c2c8d44559ed1b0e86b.elf

    • Size

      113KB

    • MD5

      047030c9d649859a053f6aa16a124c91

    • SHA1

      39cb075782f34e9ea69ac864080661546fd81a2d

    • SHA256

      6f299565151e872c9d55151d0265c1845b2e5c9a02fb3c2c8d44559ed1b0e86b

    • SHA512

      7edf36d6398ea0ca07094e3603c412b3a4d95bd1eb27aba38b6172c9118c7bb0265c19d10084c47199f300b286c4312066e48f3274f084a6ad9cab869c009bfb

    • SSDEEP

      3072:kiry859a2ADJf9wHYqbgFFo8+HeAt+TRCm7FnVqfJXFWbNb:T9a2aLqkrMgsm7FnVqfJXFWbNb

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks