General
- Target 225a167b9c4f84cdc2d06f82d4d3ca7f.bin
- Size 66KB
- Sample240108-bh331aaeh3
- SHA256 cf44b33a654702e99655c9489a8dce2128fa28892e6a1c1cf7b598428036b4de
- MD5 4aac95be9b5b1d46260aa8de0484a050
- SHA1 df011156bae9879c567a386b4e64d499c6b29d0c
- SHA512 b83a16842a11af8a5dadd75351e9cfca042526a5b4a427e008ff55c2ebe3447be550ddc1b96ffee2b4df27c32c8bc7a3263f8d2f04d108559bb03444e6c7db52
- SSDEEP 1536:/8Un7KPdlOptXX/nq1JgMfQLL9BuVack1oMgqTp5y34:j+PrsX/q1JFf6WVY1B5U4
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
f4044964a9c0bf74603e94f09230a9643a785fc623c60b823197f6878bcc99e7.elf
Resource
debian9-armhf-20231215-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
C2
-
bngoc.skyljne.click
Targets
-
- Target f4044964a9c0bf74603e94f09230a9643a785fc623c60b823197f6878bcc99e7.elf
- Size 146KB
- SHA256 f4044964a9c0bf74603e94f09230a9643a785fc623c60b823197f6878bcc99e7
- MD5 225a167b9c4f84cdc2d06f82d4d3ca7f
- SHA1 04836f27f7b5c8a1f4d6011f77293e15e942240b
- SHA512 203658b1fdcd978183d925d3428c698d1790912dd7af6a508d2e8457e9d2df6aa9147721835f7b1c171b1bcce939412bdcc592a7b5423f1d9cb1ec0766219130
- SSDEEP 3072:RhZns99bI7KX1FL4iXCXPJQFpjFUoMGR:RheOi3L4iSXPJsFUoMI
- MD5 SHA1 SHA512 SSDEEP
Score9/10Contacts a large (83549) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.