Overview

overview

10

Static

static

10

59a276465b...8ae9ef

debian-9-mips

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    59a276465bd1d8e731d7102eb38ae9ef

  • Size

    49KB

  • Sample

    231219-3avkfadcfp

  • MD5

    59a276465bd1d8e731d7102eb38ae9ef

  • SHA1

    c0f838edfc310922683f630ca16ab94503d1a979

  • SHA256

    31874ce67fa1253ac8f22641822438e4acb4e8b3cdb3b8281702622ae8bc8623

  • SHA512

    21fe5c23c8eb40721065edd75dda8ab4f90c314d30882d261be92d7a9014df7cbcbd7372757298798b3390bb1db024523c94ca6d6382ff3d71fe3279c3864b50

  • SSDEEP

    768:dlZ9hlu2tRV5dBFpNxLUBzHi7r6jrKjOUjpaDOCpdCRLZBJxlpRZt1dXSpRZB6C9:avzHhjXf0ODD//p5Iczl1

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      59a276465bd1d8e731d7102eb38ae9ef

    • Size

      49KB

    • MD5

      59a276465bd1d8e731d7102eb38ae9ef

    • SHA1

      c0f838edfc310922683f630ca16ab94503d1a979

    • SHA256

      31874ce67fa1253ac8f22641822438e4acb4e8b3cdb3b8281702622ae8bc8623

    • SHA512

      21fe5c23c8eb40721065edd75dda8ab4f90c314d30882d261be92d7a9014df7cbcbd7372757298798b3390bb1db024523c94ca6d6382ff3d71fe3279c3864b50

    • SSDEEP

      768:dlZ9hlu2tRV5dBFpNxLUBzHi7r6jrKjOUjpaDOCpdCRLZBJxlpRZt1dXSpRZB6C9:avzHhjXf0ODD//p5Iczl1

    Score
    9/10
    discovery

    • Contacts a large (47983) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks