Overview

overview

10

Static

static

10

58042feda2...f1.elf

debian-12-armhf

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c7212063b2e285ec072d0ab348ee208e.bin

  • Size

    56KB

  • Sample

    250112-b5rcqasmbr

  • MD5

    a49bae6f7dc74d3bb609881676cbbaaa

  • SHA1

    99978b06db690d093664ca1889bb0e2aac1646ac

  • SHA256

    b51633e6355fa8e76a8509ba8dbaf811f9b71f62c653ec6250fbe9f944a8188c

  • SHA512

    18ef0babc8167cdcda8b7857626762186d2bc4ef1368e809e7234873466b5f3f15971712e4ddc3e00a737aa15c22ac00b6ca7a410129926c8fa980967b19fe6b

  • SSDEEP

    1536:OyxSLujsZiWZLCmf21DzyYgsffMkxP36461nrlnFeh:vYES2d/nfM1nri

Score
10/10
gafgytdefense_evasiondiscovery

Malware Config

Targets

    • Target

      58042feda2e514f3c0badf4d7c527c8bf044e21169f287b895f7fa66e5a9c7f1.elf

    • Size

      135KB

    • MD5

      c7212063b2e285ec072d0ab348ee208e

    • SHA1

      5f8830f178b92946bedef6f8a58a6a762792a698

    • SHA256

      58042feda2e514f3c0badf4d7c527c8bf044e21169f287b895f7fa66e5a9c7f1

    • SHA512

      b77b00b30c424c7a2892f43373a783064c174cfc6df7ab73a944d512f11cd2c0ff6c808d656a30c3f891f28f2c46920bcd611ee48cceadc9e0a2e63b7ecd8c39

    • SSDEEP

      3072:sh+Radi7iaPw5388shgZl1AzqcZRQNeN0eaLmhxQu72m/RZ:qXaPw5Rl1AzqY0eaLmhxQu72m/RZ

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks