Overview

overview

7

Static

static

1

x86 (9) (2)

ubuntu-18.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    x86 (9) (2)
  • Size 55KB
  • Sample260731-vr7x4aythx
  • SHA256 75cb064f489b12d4130786e1aa6963dfa2fc9de82b8d3b2150385ce9d65d27dc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutionlinuxpersistenceprivilege_escalation

Malware Config

Targets

    • Target
      x86 (9) (2)
    • Size 55KB
    • SHA256 75cb064f489b12d4130786e1aa6963dfa2fc9de82b8d3b2150385ce9d65d27dc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscoveryexecutionpersistenceprivilege_escalation

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Creates/modifies Cron job

      Cron allows running tasks on a schedule, and is commonly used for malware persistence.

      executionpersistenceprivilege_escalation

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks