Overview

overview

10

Static

static

10

573e135837...e1.elf

debian-12-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    573e1358379d0a6dede3bd87711abb5928aedeb493e4a2c401ceaf813973f5e1.elf

  • Size

    284KB

  • Sample

    250109-cxpplawreq

  • MD5

    a05e765ec261f9aa07dc177255fc13e9

  • SHA1

    ed9f97d1936e214e246310aeedb2d50c76c61f06

  • SHA256

    573e1358379d0a6dede3bd87711abb5928aedeb493e4a2c401ceaf813973f5e1

  • SHA512

    98f1127bbe4dd026023e4de66631adecaa1bace659aecbb95823103ed73083a05d244ba668beb7ad6f878edea252db51efb5ed25572b554e8f08c854c6aa09f6

  • SSDEEP

    3072:PcMmJjecrsAK6YsTn9X6cCWuMhNiJwmIPTBJGXbXi+Nx:PcMm3r26YsT9LDMwmIPTBJGXbXi+Nx

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      573e1358379d0a6dede3bd87711abb5928aedeb493e4a2c401ceaf813973f5e1.elf

    • Size

      284KB

    • MD5

      a05e765ec261f9aa07dc177255fc13e9

    • SHA1

      ed9f97d1936e214e246310aeedb2d50c76c61f06

    • SHA256

      573e1358379d0a6dede3bd87711abb5928aedeb493e4a2c401ceaf813973f5e1

    • SHA512

      98f1127bbe4dd026023e4de66631adecaa1bace659aecbb95823103ed73083a05d244ba668beb7ad6f878edea252db51efb5ed25572b554e8f08c854c6aa09f6

    • SSDEEP

      3072:PcMmJjecrsAK6YsTn9X6cCWuMhNiJwmIPTBJGXbXi+Nx:PcMm3r26YsT9LDMwmIPTBJGXbXi+Nx

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks