Overview

overview

10

Static

static

10

4e03346e9e...be.elf

ubuntu-22.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    JaffaCakes118_41afe5922e569c637101e30b559075284b1c0c2b076f7545d251ae0e85e993f0

  • Size

    49KB

  • Sample

    241225-cw8fbavkfx

  • MD5

    0ee799407abffde35e2f14d85f933cd4

  • SHA1

    52174aadb9095b116ade7795ae523d756ce4c2d7

  • SHA256

    41afe5922e569c637101e30b559075284b1c0c2b076f7545d251ae0e85e993f0

  • SHA512

    b2ac7cb51df1483084d9afd14ead2c7f464fecb56d54b00149ea31aafc77af3c203df116a38979b1f41cf1a02a629ba1d8e53493c92f023a550020a058830b6f

  • SSDEEP

    768:H7Ff5NavMNgE7IbDO2vCKYsls7JxOtZ0kqfE4kcmLCABv3GGbAJBb59KP2F:b55Qv6MPvpi76tFn4kcmLZGLJFrYo

Score
10/10
gafgytdefense_evasiondiscoverylinux

Malware Config

Targets

    • Target

      4e03346e9e9383a809fad286914d7c1adff57ead669483a240d5ec8481f98abe.elf

    • Size

      118KB

    • MD5

      d618c26a04080bcc677cd2848661e145

    • SHA1

      aeb0db25a63f054b4f5d5c3589aaa446be5dd925

    • SHA256

      4e03346e9e9383a809fad286914d7c1adff57ead669483a240d5ec8481f98abe

    • SHA512

      9f438de57a088203e25378e99e633b6d970c8d9c2be59fb9dd1318e681b60df7ebf8bac5d6f0c7f028b31839a0122102d08ed890b309fa34394fd79e1a41b076

    • SSDEEP

      3072:0irP89T+krJfNfKsqbkW/rPrxlOhK2ghHYm7FnV5fJXFebNb:e+kVNqQWHl+m7FnV5fJXFebNb

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks