Overview

overview

10

Static

static

10

2264d61ee6...6ecb7f

debian-9-mips

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    2264d61ee67c55b7fc6e0719206ecb7f

  • Size

    55KB

  • Sample

    231219-2nj57afcf5

  • MD5

    2264d61ee67c55b7fc6e0719206ecb7f

  • SHA1

    25e7bd20293ca21a8c05b7d63e84a01d69e32c74

  • SHA256

    a6d6346a62c5921933e8a12ac20e2cc7fc4ef75824468e7c15d0c8ed7c38b76d

  • SHA512

    75d85b8acc51de5cac8f4c8dcf42eeb9d4ba8c6485768b4c30d1981ccf35ee698729d654bb82399d06f3200078738b242b464f76aca6c5a476d784f5809cf08f

  • SSDEEP

    768:d2xtxwJ0ghiyxsL67xG8Nc1l+MzWH3nQNHgbJO+v51G57575K5u5rF5l5n5VbQ9g:Uxw7hiyW76XnLO5XQ9LnpHBXwPT+iN

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      2264d61ee67c55b7fc6e0719206ecb7f

    • Size

      55KB

    • MD5

      2264d61ee67c55b7fc6e0719206ecb7f

    • SHA1

      25e7bd20293ca21a8c05b7d63e84a01d69e32c74

    • SHA256

      a6d6346a62c5921933e8a12ac20e2cc7fc4ef75824468e7c15d0c8ed7c38b76d

    • SHA512

      75d85b8acc51de5cac8f4c8dcf42eeb9d4ba8c6485768b4c30d1981ccf35ee698729d654bb82399d06f3200078738b242b464f76aca6c5a476d784f5809cf08f

    • SSDEEP

      768:d2xtxwJ0ghiyxsL67xG8Nc1l+MzWH3nQNHgbJO+v51G57575K5u5rF5l5n5VbQ9g:Uxw7hiyW76XnLO5XQ9LnpHBXwPT+iN

    Score
    9/10
    discovery

    • Contacts a large (57575) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks