Overview

overview

10

Static

static

10

938468c900...21.elf

debian-9-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    938468c9008f1062c0a29e894166ffe43760f4f1c110d430a02caf900c545621.elf

  • Size

    243KB

  • Sample

    250109-c6wt9svlbz

  • MD5

    b95548c193633e706a824fbcbed52c35

  • SHA1

    ef5a58c1525ba8e4aa33dfee59ecdf90ddb27a82

  • SHA256

    938468c9008f1062c0a29e894166ffe43760f4f1c110d430a02caf900c545621

  • SHA512

    85e4ebdec316fb6d3937f45a4b5374e6b230c61cd77d1d04e2263d1c915e7147cdb1368dadecd49873108268668fb448e0933b97562b378ae3085ab9dde02703

  • SSDEEP

    3072:9boCUNokVwXspoqKdMz+3W6cCLVvVTUcP/Tcme4caQB2v8d3JNx:eVGqeMzkldVT5cme4caQB2v8d3JNx

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      938468c9008f1062c0a29e894166ffe43760f4f1c110d430a02caf900c545621.elf

    • Size

      243KB

    • MD5

      b95548c193633e706a824fbcbed52c35

    • SHA1

      ef5a58c1525ba8e4aa33dfee59ecdf90ddb27a82

    • SHA256

      938468c9008f1062c0a29e894166ffe43760f4f1c110d430a02caf900c545621

    • SHA512

      85e4ebdec316fb6d3937f45a4b5374e6b230c61cd77d1d04e2263d1c915e7147cdb1368dadecd49873108268668fb448e0933b97562b378ae3085ab9dde02703

    • SSDEEP

      3072:9boCUNokVwXspoqKdMz+3W6cCLVvVTUcP/Tcme4caQB2v8d3JNx:eVGqeMzkldVT5cme4caQB2v8d3JNx

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks