Overview

overview

10

Static

static

10

1ab8a8d49e...fb.elf

debian-9-mipsel

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1ab8a8d49e1854d00ab7b67267eb40c4f96bfbfb5dd80dbed89c0fea0cd226fb.elf

  • Size

    5.6MB

  • Sample

    250321-cp69ns1zgt

  • MD5

    1bc524efea7982b3b6c8fca7c30286ec

  • SHA1

    83021a81635d966164f19c8bfad1aeafd22f406b

  • SHA256

    1ab8a8d49e1854d00ab7b67267eb40c4f96bfbfb5dd80dbed89c0fea0cd226fb

  • SHA512

    4f5dd02820a316ab77dfb69d42265d4398af846f9b59c64e46de57c9bf05fd8a94208027008e1367641d052321de17c8e6874c722f24aa0e5db84443cd35fe4f

  • SSDEEP

    49152:+RxVVRFMTwGupkYzfgh7rxQ2USaU85Jbq1rQcR6VYv0VF1:

Score
10/10
kaijidiscoveryexecutionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      1ab8a8d49e1854d00ab7b67267eb40c4f96bfbfb5dd80dbed89c0fea0cd226fb.elf

    • Size

      5.6MB

    • MD5

      1bc524efea7982b3b6c8fca7c30286ec

    • SHA1

      83021a81635d966164f19c8bfad1aeafd22f406b

    • SHA256

      1ab8a8d49e1854d00ab7b67267eb40c4f96bfbfb5dd80dbed89c0fea0cd226fb

    • SHA512

      4f5dd02820a316ab77dfb69d42265d4398af846f9b59c64e46de57c9bf05fd8a94208027008e1367641d052321de17c8e6874c722f24aa0e5db84443cd35fe4f

    • SSDEEP

      49152:+RxVVRFMTwGupkYzfgh7rxQ2USaU85Jbq1rQcR6VYv0VF1:

    Score
    10/10
    kaijidiscoveryexecutionpersistenceprivilege_escalation

    • Kaiji

      Kaiji payload

    • Kaiji family

      kaiji

    • kaiji_chaosbot

      Chaos-variant payload

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks