Overview

overview

10

Static

static

10

e1b6e4c392...kes118

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e1b6e4c3922e4944d62613699f2d8931_JaffaCakes118

  • Size

    151KB

  • Sample

    241211-qyn2cayqhl

  • MD5

    e1b6e4c3922e4944d62613699f2d8931

  • SHA1

    c0db09f0700cda62d63a4682a36f92137558ef88

  • SHA256

    7238c418c0d81f27cecdf05d32db9296cd8b6b438042ea3c7643ace48c0a4c76

  • SHA512

    ee90ce69514660ca6bd30f09862c9ed66607ff82a30310cbc27853d75b424ea8a11056a2270102eaacf413bec4f44aa8b18875cd95e052497d98f8abca7dbe88

  • SSDEEP

    3072:JW6Bu9tS1aRG4dKP6hT/F9N2mrThPaLEnn7rNb:c6Mi6bF6mrThPaLEnn7rNb

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      e1b6e4c3922e4944d62613699f2d8931_JaffaCakes118

    • Size

      151KB

    • MD5

      e1b6e4c3922e4944d62613699f2d8931

    • SHA1

      c0db09f0700cda62d63a4682a36f92137558ef88

    • SHA256

      7238c418c0d81f27cecdf05d32db9296cd8b6b438042ea3c7643ace48c0a4c76

    • SHA512

      ee90ce69514660ca6bd30f09862c9ed66607ff82a30310cbc27853d75b424ea8a11056a2270102eaacf413bec4f44aa8b18875cd95e052497d98f8abca7dbe88

    • SSDEEP

      3072:JW6Bu9tS1aRG4dKP6hT/F9N2mrThPaLEnn7rNb:c6Mi6bF6mrThPaLEnn7rNb

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks