Overview

overview

10

Static

static

10

linux_mips.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    linux_mips.elf

  • Size

    5.6MB

  • Sample

    250320-11fg4atjs6

  • MD5

    f50a8a599d08e80dd60455ffdef015af

  • SHA1

    e236c6af96236e9c57b35eda10a161de0efed75e

  • SHA256

    558fed7a80236443c85b70f36e9452e2c33d47aceb6e126588aeeca88724297e

  • SHA512

    e8f3dc16f25f1f2fa3e2c3eb2c13af819386a5b81fbb2c237a310b7a0e8edb6484d28a0c882eca4b4ec34775dc4d33464ad44f36cae43b074aa7f6c1c65defb7

  • SSDEEP

    49152:H2EpH9kX4nazMqH5Erob6XMv7fn3FuL9idt42uXYfTYetBDa9zrHAMnWHsLFnoeF:WEiAQTMZudhDM

Score
10/10
kaijidiscoveryexecutionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      linux_mips.elf

    • Size

      5.6MB

    • MD5

      f50a8a599d08e80dd60455ffdef015af

    • SHA1

      e236c6af96236e9c57b35eda10a161de0efed75e

    • SHA256

      558fed7a80236443c85b70f36e9452e2c33d47aceb6e126588aeeca88724297e

    • SHA512

      e8f3dc16f25f1f2fa3e2c3eb2c13af819386a5b81fbb2c237a310b7a0e8edb6484d28a0c882eca4b4ec34775dc4d33464ad44f36cae43b074aa7f6c1c65defb7

    • SSDEEP

      49152:H2EpH9kX4nazMqH5Erob6XMv7fn3FuL9idt42uXYfTYetBDa9zrHAMnWHsLFnoeF:WEiAQTMZudhDM

    Score
    10/10
    kaijidiscoveryexecutionpersistenceprivilege_escalation

    • Kaiji

      Kaiji payload

    • Kaiji family

      kaiji

    • kaiji_chaosbot

      Chaos-variant payload

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks