General

  • Target

    d3138def76dd446a4fbb806d3a39608cec1b3204e1623ef466e9a51a6a156182.elf

  • Size

    5.6MB

  • Sample

    250213-hn656svpht

  • MD5

    3a777e8bb97060b723928aa5cd1110e4

  • SHA1

    8fd6c45992aae25b65a5e45370731217ffd400df

  • SHA256

    d3138def76dd446a4fbb806d3a39608cec1b3204e1623ef466e9a51a6a156182

  • SHA512

    bcf3654ab7dced8f5e2d7d3405070c8e54c6823302982a2c240183451fb35b3eed69957b346edb2246d8ac11f7da0131c10ecf943d15e3a1a7086e71f3305c3d

  • SSDEEP

    49152:H2EpH9kX4nazMqH5Erob6XMv7fn3FuL9idt42uXYfTYetBDa9zrHAMn2HsLFnoeF:WEiAQXMZudhDM

Malware Config

Targets

    • Target

      d3138def76dd446a4fbb806d3a39608cec1b3204e1623ef466e9a51a6a156182.elf

    • Size

      5.6MB

    • MD5

      3a777e8bb97060b723928aa5cd1110e4

    • SHA1

      8fd6c45992aae25b65a5e45370731217ffd400df

    • SHA256

      d3138def76dd446a4fbb806d3a39608cec1b3204e1623ef466e9a51a6a156182

    • SHA512

      bcf3654ab7dced8f5e2d7d3405070c8e54c6823302982a2c240183451fb35b3eed69957b346edb2246d8ac11f7da0131c10ecf943d15e3a1a7086e71f3305c3d

    • SSDEEP

      49152:H2EpH9kX4nazMqH5Erob6XMv7fn3FuL9idt42uXYfTYetBDa9zrHAMn2HsLFnoeF:WEiAQXMZudhDM

    • Kaiji

      Kaiji payload

    • Kaiji family

    • kaiji_chaosbot

      Chaos-variant payload

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks