Overview

overview

10

Static

static

10

a.elf

ubuntu-22.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a.elf

  • Size

    93KB

  • Sample

    250105-jm4t4azlak

  • MD5

    b062e74dd216b96e8573bb71bb6156a0

  • SHA1

    a903e99874d58fa1f799daa23b0af83508b0f4e1

  • SHA256

    ae3cbe9f45318d384a1b884c0c78bf7529dcd4d3f8411d40046bb6f926af109b

  • SHA512

    425e4cb13cc55e2bdb20af671f8f39795f6d57172a77f0b001dbba8f22793985cda48ae015101bf9b0b23c7f3e4b776bb75424fb28fac79f1750c1906afa9f34

  • SSDEEP

    1536:a7LkK1i4Ftacex2FOfWt+AakNbQCOpxVZEV0ZtGBammioVcYRZLrn04i:fK1i4FtacexkUAakNbQCSzGammFVcYRi

Score
10/10
gafgytdefense_evasiondiscoverylinux

Malware Config

Targets

    • Target

      a.elf

    • Size

      93KB

    • MD5

      b062e74dd216b96e8573bb71bb6156a0

    • SHA1

      a903e99874d58fa1f799daa23b0af83508b0f4e1

    • SHA256

      ae3cbe9f45318d384a1b884c0c78bf7529dcd4d3f8411d40046bb6f926af109b

    • SHA512

      425e4cb13cc55e2bdb20af671f8f39795f6d57172a77f0b001dbba8f22793985cda48ae015101bf9b0b23c7f3e4b776bb75424fb28fac79f1750c1906afa9f34

    • SSDEEP

      1536:a7LkK1i4Ftacex2FOfWt+AakNbQCOpxVZEV0ZtGBammioVcYRZLrn04i:fK1i4FtacexkUAakNbQCSzGammFVcYRi

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks