Extracted

• • Target

    linux_amd64.elf

  • Size

    5.2MB

  • MD5

    645dd54b4f86542bc9bd64965576c6bc

  • SHA1

    50382f576e98dc1d4d35204cf1780fbc4b0d9b66

  • SHA256

    dc041ee1a2da8c8ba6e874f414d5b52a0237f39b2995890b56ac7fb173d86104

  • SHA512

    b8207db1e063382e8f165198e46f8cad92d2f204edef10a953fece5713fa9e7a99af479146891aa407abd2e6d328b940701f773bfada87ff0d10450814709042

  • SSDEEP

    49152:7Xa6xzZWhrb/T4vO90dL3BmAFd4A64nsfJPJ6TdXnT9aqeJaz2xNkapDnYRQoj1P:b2ONLBzSxtSTTElHz

  Score

  10^/10

  kaijidefense_evasiondiscoveryexecutionpersistenceprivilege_escalation

  • Kaiji

    Kaiji payload

  • Kaiji family

    kaiji

  • kaiji_chaosbot

    Chaos-variant payload

  • Executes dropped EXE

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Creates/modifies Cron job

    Cron allows running tasks on a schedule, and is commonly used for malware persistence.

    executionpersistenceprivilege_escalation

  • Creates/modifies environment variables

    Creating/modifying environment variables is a common persistence mechanism.

    persistenceprivilege_escalationdefense_evasion

  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Modifies init.d

    Adds/modifies system service, likely for persistence.

    persistence

  • Modifies systemd

    Adds/ modifies systemd service files. Likely to achieve persistence.

    persistenceprivilege_escalation

  • Write file to user bin folder

    persistence

  • Modifies Bash startup script

    persistence
  behavioral1