Overview

overview

10

Static

static

10

8cf8c72116...10a41f

debian-9-mipsel

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    8cf8c721164eb5bb104d14224110a41f

  • Size

    65KB

  • Sample

    231220-hlan7agdak

  • MD5

    8cf8c721164eb5bb104d14224110a41f

  • SHA1

    4f9e33266da037cc3472b07ac02e96f1463d0524

  • SHA256

    086222a22bee37a4523f44896ab093f681a274cf9eb668595ad94fc19cd4f554

  • SHA512

    735bf2fe0f9b855fc28387da6e32c185b0af316d8de16b8cd3993f8440a34dbb42b8e769e874798f419f38c43ed6a813204ab91bd02c53d1ecd7ac65f031d95b

  • SSDEEP

    1536:Bd0JVJXEQpQP/ui18M39SUSEE0hLAcMBYre:Bd0JLuN3Qc

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      8cf8c721164eb5bb104d14224110a41f

    • Size

      65KB

    • MD5

      8cf8c721164eb5bb104d14224110a41f

    • SHA1

      4f9e33266da037cc3472b07ac02e96f1463d0524

    • SHA256

      086222a22bee37a4523f44896ab093f681a274cf9eb668595ad94fc19cd4f554

    • SHA512

      735bf2fe0f9b855fc28387da6e32c185b0af316d8de16b8cd3993f8440a34dbb42b8e769e874798f419f38c43ed6a813204ab91bd02c53d1ecd7ac65f031d95b

    • SSDEEP

      1536:Bd0JVJXEQpQP/ui18M39SUSEE0hLAcMBYre:Bd0JLuN3Qc

    Score
    9/10
    discovery

    • Contacts a large (275265) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Changes its process name

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks