Overview

overview

10

Static

static

10

2936f3c8ef...bb.elf

debian-12-mipsel

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2936f3c8ef94b48648ec143cfce4d197e8826016213ce0f297bef149be7577bb.elf

  • Size

    152KB

  • Sample

    250110-cnt8qa1kcp

  • MD5

    ca9c6f4322c9c6e0fe6e4490bf87ce42

  • SHA1

    e322d9d7342f3eb7808d018a0c602b453d5c9d5f

  • SHA256

    2936f3c8ef94b48648ec143cfce4d197e8826016213ce0f297bef149be7577bb

  • SHA512

    d896c6350cdf3132541ab2e8f68d18ab12946fb6fe17d1c02b57edd565d0bdb93fbb5ce96f61df9ff1b02fcedcf9b2618a036e84fde04a7af91e57720af12c8f

  • SSDEEP

    3072:xqXp982JnQ/lTI7Xt8cmrThPatTw0IoRe:xq3JnMlTI79xmrThPatTw0IoRe

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      2936f3c8ef94b48648ec143cfce4d197e8826016213ce0f297bef149be7577bb.elf

    • Size

      152KB

    • MD5

      ca9c6f4322c9c6e0fe6e4490bf87ce42

    • SHA1

      e322d9d7342f3eb7808d018a0c602b453d5c9d5f

    • SHA256

      2936f3c8ef94b48648ec143cfce4d197e8826016213ce0f297bef149be7577bb

    • SHA512

      d896c6350cdf3132541ab2e8f68d18ab12946fb6fe17d1c02b57edd565d0bdb93fbb5ce96f61df9ff1b02fcedcf9b2618a036e84fde04a7af91e57720af12c8f

    • SSDEEP

      3072:xqXp982JnQ/lTI7Xt8cmrThPatTw0IoRe:xq3JnMlTI79xmrThPatTw0IoRe

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks