Overview

overview

10

Static

static

10

4f89975acc...2e.elf

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4f89975accca176245cdb371fa833d7802b7ff3f3f25acc46f54310bcf453e2e.elf

  • Size

    5.6MB

  • Sample

    250217-dlw5zaxqel

  • MD5

    23a78aa9db6055bfb50eaa8b71771cb9

  • SHA1

    2ede9a576b704813165a6e6f534d8005e91c19ed

  • SHA256

    4f89975accca176245cdb371fa833d7802b7ff3f3f25acc46f54310bcf453e2e

  • SHA512

    a47142e6080fd9804af4ec69f22782483d3a7f6b324b08ec270fb7869acd311dd2dbf0cb9b2289f06f82b3b5f6142d55f6397990144f022cbebb66f2a4e971d3

  • SSDEEP

    49152:+RxVVRFMTwJupkYzfgh7rxQ2USaU85Jbq1rQcR6VYv0VF1:

Score
10/10
kaijidiscoveryexecutionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      4f89975accca176245cdb371fa833d7802b7ff3f3f25acc46f54310bcf453e2e.elf

    • Size

      5.6MB

    • MD5

      23a78aa9db6055bfb50eaa8b71771cb9

    • SHA1

      2ede9a576b704813165a6e6f534d8005e91c19ed

    • SHA256

      4f89975accca176245cdb371fa833d7802b7ff3f3f25acc46f54310bcf453e2e

    • SHA512

      a47142e6080fd9804af4ec69f22782483d3a7f6b324b08ec270fb7869acd311dd2dbf0cb9b2289f06f82b3b5f6142d55f6397990144f022cbebb66f2a4e971d3

    • SSDEEP

      49152:+RxVVRFMTwJupkYzfgh7rxQ2USaU85Jbq1rQcR6VYv0VF1:

    Score
    10/10
    kaijidiscoveryexecutionpersistenceprivilege_escalation

    • Kaiji

      Kaiji payload

    • Kaiji family

      kaiji

    • kaiji_chaosbot

      Chaos-variant payload

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks