Overview

overview

9

Static

static

1

0Rw.elf

debian-12-mipsel

Sharing

Copy URL Twitter E-mail

General

  • Target
    0Rw.elf
  • Size 128KB
  • Sample260703-przzlaht2w
  • SHA256 55a195fd83d3cbe9a5d0b4f88c59833776d32a65e807d137bcfa4f9a7c8e1f12
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
antivmdefense_evasiondiscovery

Malware Config

Targets

    • Target
      0Rw.elf
    • Size 128KB
    • SHA256 55a195fd83d3cbe9a5d0b4f88c59833776d32a65e807d137bcfa4f9a7c8e1f12
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    9/10
    antivmdefense_evasiondiscovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads hardware information

      Accesses system info like serial numbers, manufacturer names etc.

      discovery

    • Reads list of loaded kernel modules

      Reads the list of currently loaded kernel modules, possibly to detect virtual environments.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks