General

  • Target
    00okmpsl.elf
  • Size 57KB
  • Sample260420-as792aev7p
  • SHA256 bcd8805da45aaa227c3979c999890c3d5778d078d0a22f0d552b47a364387638
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Targets

    • Target
      00okmpsl.elf
    • Size 57KB
    • SHA256 bcd8805da45aaa227c3979c999890c3d5778d078d0a22f0d552b47a364387638
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

MITRE ATT&CK Enterprise v16

Tasks