Overview

overview

10

Static

static

10

e.elf

debian-12-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e.elf

  • Size

    152KB

  • Sample

    250105-jmn4mszkgr

  • MD5

    5360c6adb7962ba1a526469abed0f1af

  • SHA1

    1459135c35df53c199d0557089ba4c622a4bc65e

  • SHA256

    e86ab9e0cf4d0ca7fa8bd43a02338ed01ace773016d8d28f7702e6678593e5ef

  • SHA512

    c15fea3a4368f27375d2082146f85f9269cec609160b4c87101ae8714ba039aa463762a21827e6d687d7ba4fdc4396e50f6d73880a9a88144caa51b178f7cc70

  • SSDEEP

    3072:xqXp982JnQ/lTIQXt8cmrThPatTw0IoRe:xq3JnMlTIQ9xmrThPatTw0IoRe

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      e.elf

    • Size

      152KB

    • MD5

      5360c6adb7962ba1a526469abed0f1af

    • SHA1

      1459135c35df53c199d0557089ba4c622a4bc65e

    • SHA256

      e86ab9e0cf4d0ca7fa8bd43a02338ed01ace773016d8d28f7702e6678593e5ef

    • SHA512

      c15fea3a4368f27375d2082146f85f9269cec609160b4c87101ae8714ba039aa463762a21827e6d687d7ba4fdc4396e50f6d73880a9a88144caa51b178f7cc70

    • SSDEEP

      3072:xqXp982JnQ/lTIQXt8cmrThPatTw0IoRe:xq3JnMlTIQ9xmrThPatTw0IoRe

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks