Overview

overview

10

Static

static

10

3173307bd4...31.elf

ubuntu-20.04-amd64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    571cf759d074ffb3ade51d8d72964416.bin

  • Size

    43KB

  • Sample

    250112-bpxjss1jeq

  • MD5

    74e510d6e9e31928290fe5c20bca34b0

  • SHA1

    96b916cc96dbf1a2aff43ab1d7bbee8a2bd72adf

  • SHA256

    6823636f95a0365eca79ae8e195396ba956864823d528787fc927c6e058119a2

  • SHA512

    5dd8df1b571e93369494edfa45f0024fc71a998f96b765cbb29a12e64c0b7b71c54b9523f0e66bab6767417f31831e58f1fb2100786eea11025a78a6e2de40a8

  • SSDEEP

    768:vrZSw6vudc0t1U3HPaLr7U1I/oOs+qHmln3NSQb/QNEO460Z1wu:vlNS0tOsrYqoDfmln36NEtwu

Score
10/10
gafgytdefense_evasiondiscoverylinux

Malware Config

Targets

    • Target

      3173307bd4fb47b9bfff050f22be58fe2396e13f514d41b23f8f1922d5c7dd31.elf

    • Size

      93KB

    • MD5

      571cf759d074ffb3ade51d8d72964416

    • SHA1

      bf3d0db705b8deb7015e80ef0c7419aefa833dd8

    • SHA256

      3173307bd4fb47b9bfff050f22be58fe2396e13f514d41b23f8f1922d5c7dd31

    • SHA512

      bda9127534ba0a674e378538268cf3450d58aff27142685afdac146759479f0d2af4429110b3b41b4c5b22652840820453f775861a0a9f2df572ddbe63c106e6

    • SSDEEP

      1536:Ek0OQmh/c4jU4AJ3cEsMHHz5Dd38q2tBXrpEn9omJUeO7mnmmmioVcYRZLrn04i:Ek0OlfjUdVcRMVDdMqQBXrKJeHAmmmFA

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks