Overview

overview

10

Static

static

10

c858f4e0ba...1f.elf

debian-9-mips

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c858f4e0ba6e6af00db0fdff7ddbf58a27d1c1ec57896367e52a1d0b5f09191f.elf

  • Size

    5.6MB

  • Sample

    250321-erxt5as1ey

  • MD5

    fbf096212c93ddffb456ab302df8e786

  • SHA1

    2b56a586a7f0596121c70cbb413ea9011f318f88

  • SHA256

    c858f4e0ba6e6af00db0fdff7ddbf58a27d1c1ec57896367e52a1d0b5f09191f

  • SHA512

    bb9c41b580f886806e642e4633e7b357717a8960148c3be9fc87ab08e6a2f8f778402235d01032bc9d64ffbc7a9c32a7ea7c6d34fb0e9d574f81acf569b52bee

  • SSDEEP

    49152:L3qbSw1zUu72RTScFnsKbyRHzPDPs4coYtJkEk2wBIxWyDp/9zUH+zOuUx83ZIqG:jqO0o2jgDQ

Score
10/10
kaijidiscoveryexecutionpersistenceprivilege_escalation

Malware Config

Targets

    • Target

      c858f4e0ba6e6af00db0fdff7ddbf58a27d1c1ec57896367e52a1d0b5f09191f.elf

    • Size

      5.6MB

    • MD5

      fbf096212c93ddffb456ab302df8e786

    • SHA1

      2b56a586a7f0596121c70cbb413ea9011f318f88

    • SHA256

      c858f4e0ba6e6af00db0fdff7ddbf58a27d1c1ec57896367e52a1d0b5f09191f

    • SHA512

      bb9c41b580f886806e642e4633e7b357717a8960148c3be9fc87ab08e6a2f8f778402235d01032bc9d64ffbc7a9c32a7ea7c6d34fb0e9d574f81acf569b52bee

    • SSDEEP

      49152:L3qbSw1zUu72RTScFnsKbyRHzPDPs4coYtJkEk2wBIxWyDp/9zUH+zOuUx83ZIqG:jqO0o2jgDQ

    Score
    10/10
    kaijidiscoveryexecutionpersistenceprivilege_escalation

    • Kaiji

      Kaiji payload

    • Kaiji family

      kaiji

    • kaiji_chaosbot

      Chaos-variant payload

    • Executes dropped EXE

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks