Overview

overview

10

Static

static

10

82b0c31bb0...81.elf

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    82b0c31bb093dd6c92ad8fab0f068215e12fcd02fa4c1bb7cdbdce5c000d5681.elf

  • Size

    152KB

  • Sample

    250106-df242atpas

  • MD5

    e5892b347dd9d2b6246a80e17dfcda0f

  • SHA1

    9692de7cc50debfac5e679370220b32599ed4d5b

  • SHA256

    82b0c31bb093dd6c92ad8fab0f068215e12fcd02fa4c1bb7cdbdce5c000d5681

  • SHA512

    289972361b7ede68484956189e2e7f5739aec73e8a5ea33679add17b78a7bdd003886767d5362f17fb467398ceaa74222390ac16623d35a050e57bf8b1972d0a

  • SSDEEP

    3072:DXak2Q6hIBZbY72CYCc9gARon1ukmrThPatTw0IoRe:7a3Qn/CIbRi8kmrThPatTw0IoRe

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      82b0c31bb093dd6c92ad8fab0f068215e12fcd02fa4c1bb7cdbdce5c000d5681.elf

    • Size

      152KB

    • MD5

      e5892b347dd9d2b6246a80e17dfcda0f

    • SHA1

      9692de7cc50debfac5e679370220b32599ed4d5b

    • SHA256

      82b0c31bb093dd6c92ad8fab0f068215e12fcd02fa4c1bb7cdbdce5c000d5681

    • SHA512

      289972361b7ede68484956189e2e7f5739aec73e8a5ea33679add17b78a7bdd003886767d5362f17fb467398ceaa74222390ac16623d35a050e57bf8b1972d0a

    • SSDEEP

      3072:DXak2Q6hIBZbY72CYCc9gARon1ukmrThPatTw0IoRe:7a3Qn/CIbRi8kmrThPatTw0IoRe

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks