Overview

overview

7

Static

static

1

client-lin...sf.elf

debian-9-mips

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    client-linux-mips-sf.elf
  • Size 7.3MB
  • Sample260826-nn95qada74
  • SHA256 c9909e1649cad57dc4c9929876de666e98d7143fb28c6353b7edffd99888799c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscovery

Malware Config

Targets

    • Target
      client-linux-mips-sf.elf
    • Size 7.3MB
    • SHA256 c9909e1649cad57dc4c9929876de666e98d7143fb28c6353b7edffd99888799c
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    7/10
    defense_evasiondiscovery

    • Indicator Removal: Clear Command History

      Adversaries may remove indicators of compromise from the host to evade detection.

      defense_evasion

    • Deletes system logs

      Deletes log file which contains global system messages. Adversaries may delete system logs to minimize their footprint.

      defense_evasion

    • Executes dropped EXE

    • Unexpected DNS network traffic destination

      Network traffic to other servers than the configured DNS servers was detected on the DNS port.

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    • Deletes log files

      Deletes log files on the system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks