Overview

overview

10

Static

static

10

ba4b91ad6a...c0.elf

debian-9-mips

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ba4b91ad6a5ffe5224db0e54544fbca4ad43c1e01515e85b55e06a5dde76b5c0.elf

  • Size

    66KB

  • Sample

    250307-g9ahnavyhx

  • MD5

    0f4d7fd03c42b4b316076e824d59d9cd

  • SHA1

    1c780b69e77ca6e41965b40968c6fcf712cda38c

  • SHA256

    ba4b91ad6a5ffe5224db0e54544fbca4ad43c1e01515e85b55e06a5dde76b5c0

  • SHA512

    812f518f0e37a66069b4de6c6e507a71ec79752dc122323dd2a5c1b1356d7b6b97709134663977e04eb8faaae035421d01c3683ffb1b31559004d8bc4d850728

  • SSDEEP

    768:5298KlrSS+WNDkxFHmQ7aC1dst1mzZfCq8J/2T8yFL1C4t4C4O4B4Y4z4I6hl+HR:c8YNDkvHm9jUzlLshlS0z8F+ps21U

Score
10/10
miraidefense_evasiondiscovery

Malware Config

Targets

    • Target

      ba4b91ad6a5ffe5224db0e54544fbca4ad43c1e01515e85b55e06a5dde76b5c0.elf

    • Size

      66KB

    • MD5

      0f4d7fd03c42b4b316076e824d59d9cd

    • SHA1

      1c780b69e77ca6e41965b40968c6fcf712cda38c

    • SHA256

      ba4b91ad6a5ffe5224db0e54544fbca4ad43c1e01515e85b55e06a5dde76b5c0

    • SHA512

      812f518f0e37a66069b4de6c6e507a71ec79752dc122323dd2a5c1b1356d7b6b97709134663977e04eb8faaae035421d01c3683ffb1b31559004d8bc4d850728

    • SSDEEP

      768:5298KlrSS+WNDkxFHmQ7aC1dst1mzZfCq8J/2T8yFL1C4t4C4O4B4Y4z4I6hl+HR:c8YNDkvHm9jUzlLshlS0z8F+ps21U

    Score
    7/10
    defense_evasiondiscovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Renames itself

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks