Overview

overview

10

Static

static

10

linux_mips...at.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    linux_mips_softfloat.elf

  • Size

    5.6MB

  • Sample

    250216-tkxywaskar

  • MD5

    8c2a48dbcfe7d0c76fc8aced8a34970f

  • SHA1

    a94e7b53723fe7c97ed7ccd879f9a65fbce49d87

  • SHA256

    4790805c4b31a69cd9c2bae8ad62f8c3770e251aaa83bfa5104fb0034e485ba7

  • SHA512

    ac999ca96efa3eb468691bfdb532c43c3bca76bac50effde02e28f9ff043a64bbf3b28ba1386d79922ff7adcaa31c14f9bcbe59cb4842059cefe0371aac8e1b1

  • SSDEEP

    49152:L3qbSw1zUu72RTScFnsKbyRHzPDPs4coYtJkEk2wBIxWyDp/9zUH+zOu5x83ZIqG:jqO0o22gDQ

Score
10/10
kaijidiscoveryexecutionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      linux_mips_softfloat.elf

    • Size

      5.6MB

    • MD5

      8c2a48dbcfe7d0c76fc8aced8a34970f

    • SHA1

      a94e7b53723fe7c97ed7ccd879f9a65fbce49d87

    • SHA256

      4790805c4b31a69cd9c2bae8ad62f8c3770e251aaa83bfa5104fb0034e485ba7

    • SHA512

      ac999ca96efa3eb468691bfdb532c43c3bca76bac50effde02e28f9ff043a64bbf3b28ba1386d79922ff7adcaa31c14f9bcbe59cb4842059cefe0371aac8e1b1

    • SSDEEP

      49152:L3qbSw1zUu72RTScFnsKbyRHzPDPs4coYtJkEk2wBIxWyDp/9zUH+zOu5x83ZIqG:jqO0o22gDQ

    Score
    10/10
    kaijidiscoveryexecutionpersistenceprivilege_escalation

    • Kaiji

      Kaiji payload

    • Kaiji family

      kaiji

    • kaiji_chaosbot

      Chaos-variant payload

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks