Overview

overview

10

Static

static

10

b.elf

ubuntu-24.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b.elf

  • Size

    108KB

  • Sample

    250105-jmh8dsxndv

  • MD5

    220ce404a1b630ee9ac6d040b808bc8a

  • SHA1

    52c19820ebc5fe07cd9f7a007c6576ac5216c956

  • SHA256

    01f9c04efb37e80965cc9a0f7382b0e60588d3ab627f1d22d38ff121a861c98b

  • SHA512

    ab3c414d3e2c5111fd5052737eb05dfbd74fa882fbf0dc0aba9c1f80cc3bf6b1fd954b28c23c1847fc2cbf087a5515ad90c4a02931d7472c13a84a9521d1d59c

  • SSDEEP

    3072:RiryBV5RUKun9qEbB6yqz45feauvU70m7FnVYIY+F5mRe:F5sXZqMxYU70m7FnVYIY+F5mRe

Score
10/10
gafgytdefense_evasiondiscoverylinux

Malware Config

Targets

    • Target

      b.elf

    • Size

      108KB

    • MD5

      220ce404a1b630ee9ac6d040b808bc8a

    • SHA1

      52c19820ebc5fe07cd9f7a007c6576ac5216c956

    • SHA256

      01f9c04efb37e80965cc9a0f7382b0e60588d3ab627f1d22d38ff121a861c98b

    • SHA512

      ab3c414d3e2c5111fd5052737eb05dfbd74fa882fbf0dc0aba9c1f80cc3bf6b1fd954b28c23c1847fc2cbf087a5515ad90c4a02931d7472c13a84a9521d1d59c

    • SSDEEP

      3072:RiryBV5RUKun9qEbB6yqz45feauvU70m7FnVYIY+F5mRe:F5sXZqMxYU70m7FnVYIY+F5mRe

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks