kaiji | 5e74711ff4d14b247f790792c25b2b39287ca3d2becfe5efe0c964d2ba4c24cd | Triage

Sharing

General

Target

linux_mipsel.elf
Size

5.6MB
Sample

250320-2nw5razwbt
MD5

0a726ddab4af1ad1c0370d205d367cb3
SHA1

7378a0ac31c458985753d3f3b8da1ca460f79043
SHA256

5e74711ff4d14b247f790792c25b2b39287ca3d2becfe5efe0c964d2ba4c24cd
SHA512

2829517bf829008e38d7f2b278cee72cf44847ac848bed7b2e2df2fb14f0966f3fbd66345254338c33598e309dc28055731157bfed3de8bfc5a97e414931b35e
SSDEEP

98304:yC91hAFxvW6WGVqq7g3JDCg76dAuE8iW5ay5mIOX+aaNcc8pNkxXkz8xBs3K4HUd:yC91hAFxvW6WGVqq7g3JDCg76dAuE8iW

Score

10^/10

kaiji defense_evasion discovery persistence privilege_escalation

Malware Config

Targets

- Target
  
  linux_mipsel.elf
- Size
  
  5.6MB
- MD5
  
  0a726ddab4af1ad1c0370d205d367cb3
- SHA1
  
  7378a0ac31c458985753d3f3b8da1ca460f79043
- SHA256
  
  5e74711ff4d14b247f790792c25b2b39287ca3d2becfe5efe0c964d2ba4c24cd
- SHA512
  
  2829517bf829008e38d7f2b278cee72cf44847ac848bed7b2e2df2fb14f0966f3fbd66345254338c33598e309dc28055731157bfed3de8bfc5a97e414931b35e
- SSDEEP
  
  98304:yC91hAFxvW6WGVqq7g3JDCg76dAuE8iW5ay5mIOX+aaNcc8pNkxXkz8xBs3K4HUd:yC91hAFxvW6WGVqq7g3JDCg76dAuE8iW
Score

7^/10

defense_evasion discovery persistence privilege_escalation
- Executes dropped EXE
- Modifies Watchdog functionality
  Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
  defense_evasion
- Enumerates running processes
  Discovers information about currently running processes on the system
- Modifies init.d
  Adds/modifies system service, likely for persistence.
  persistence
- Modifies systemd
  Adds/ modifies systemd service files. Likely to achieve persistence.
  persistence privilege_escalation
behavioral1

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

XDG Autostart Entries

Boot or Logon Initialization Scripts

RC Scripts

Create or Modify System Process

Systemd Service

Privilege Escalation

Boot or Logon Autostart Execution

XDG Autostart Entries

Boot or Logon Initialization Scripts

RC Scripts

Create or Modify System Process

Systemd Service

Defense Evasion

Impair Defenses

Credential Access

Discovery

System Information Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

defense_evasiondiscoverypersistenceprivilege_escalation