Overview

overview

10

Static

static

10

451c5699be...57.elf

debian-12-mipsel

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    451c5699be2feac88af56d5cbfbb5efc9561794ec93844d1a010d9e6bc815f57.elf

  • Size

    253KB

  • Sample

    241211-cznv3s1rct

  • MD5

    663ac1bdb34abacde4a22fc79864e968

  • SHA1

    5772847c44e6d5d560c6a89595fd621ced0c9e1d

  • SHA256

    451c5699be2feac88af56d5cbfbb5efc9561794ec93844d1a010d9e6bc815f57

  • SHA512

    4cf9b5d8ff009018451cfecb98e6c28e217a9969cc1a29024da16d157af3658b777c3ac66ec162decb629d7b270d069122a981be1144261668541c9800738344

  • SSDEEP

    3072:KQI6B2S63X5wy/gFTp6bD9faWpV25qyphC6SCemnrtZmIqwbZnM:K96B2S63pwyHyCIhC/sriHwRM

Score
10/10
miraidefense_evasiondiscovery

Malware Config

Targets

    • Target

      451c5699be2feac88af56d5cbfbb5efc9561794ec93844d1a010d9e6bc815f57.elf

    • Size

      253KB

    • MD5

      663ac1bdb34abacde4a22fc79864e968

    • SHA1

      5772847c44e6d5d560c6a89595fd621ced0c9e1d

    • SHA256

      451c5699be2feac88af56d5cbfbb5efc9561794ec93844d1a010d9e6bc815f57

    • SHA512

      4cf9b5d8ff009018451cfecb98e6c28e217a9969cc1a29024da16d157af3658b777c3ac66ec162decb629d7b270d069122a981be1144261668541c9800738344

    • SSDEEP

      3072:KQI6B2S63X5wy/gFTp6bD9faWpV25qyphC6SCemnrtZmIqwbZnM:K96B2S63pwyHyCIhC/sriHwRM

    Score
    9/10
    defense_evasiondiscovery

    • Contacts a large (118995) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • File and Directory Permissions Modification

      Adversaries may modify file or directory permissions to evade defenses.

      defense_evasion

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks