Overview

overview

10

Static

static

10

ROOTKITSON.x86

ubuntu-18.04-amd64

7

ROOTKITSON.x86

ubuntu-20.04-amd64

7

ROOTKITSON.x86

ubuntu-22.04-amd64

7

ROOTKITSON.x86

ubuntu-24.04-amd64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    ROOTKITSON.x86
  • Size 73KB
  • Sample260804-ctme3abe49
  • SHA256 184fd0dab236dcb4889b5824ef2577577a34be3057e7d113c1eed7ef515b1e4e
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
miraibotnetdiscoverylinuxrootkit

Malware Config

Extracted

Family

  • mirai

C2

  • coolcams.duckdns.org

Targets

    • Target
      ROOTKITSON.x86
    • Size 73KB
    • SHA256 184fd0dab236dcb4889b5824ef2577577a34be3057e7d113c1eed7ef515b1e4e
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    discoveryrootkit

    • Loads a kernel module

      Loads a Linux kernel module, potentially to achieve persistence

      rootkit

    • Traces itself

      Traces itself to prevent debugging attempts

    behavioral1behavioral2behavioral3behavioral4

MITRE ATT&CK Matrix

Tasks