General
-
Target
910c5eb085dd01ea38e0e19ade69c111.bin
-
Size
67KB
-
Sample
240111-dmpghsecf8
-
MD5
35ba4e221766dbee732ddd99eccc04c4
-
SHA1
9f6f7fd00e5c3e015539393b5d09a78667881c7e
-
SHA256
3bd4977cf7a4f5a0d1419fa3ee8a57d7c619f2478c07cd9d8343e72a3da355e7
-
SHA512
9beb61c74509a489b04b85274effb2c0602f679dbc5b511d73715029b474577344bffd34fbd4d31fea878c878c6c2ebe7abafae70ed70cd5273b11e72668d0e1
-
SSDEEP
1536:VvmLenfoy3qEKp0J/ppz1hB/DQEDAggFiRzPTD:Vv4enfhntf/8qgFEPX
Behavioral task
behavioral1
Sample
b5f00e256c6a42e17e09cbfb08a5d1260400847bf06bc61f2988b20b12a91373.elf
Resource
debian9-armhf-20231221-en
Malware Config
Extracted
mirai
bngoc.skyljne.click
Targets
-
-
Target
b5f00e256c6a42e17e09cbfb08a5d1260400847bf06bc61f2988b20b12a91373.elf
-
Size
148KB
-
MD5
910c5eb085dd01ea38e0e19ade69c111
-
SHA1
64d265a3410a80d3ca02a8d0587223f4517e0789
-
SHA256
b5f00e256c6a42e17e09cbfb08a5d1260400847bf06bc61f2988b20b12a91373
-
SHA512
db254bc2bc64919e612c50037c63df1e4534e09d76482481b85b585cb22f079c95f1f0ac562b2637029b35a0f072aba0e520ef7f8215058c9d1a1a0898896cd1
-
SSDEEP
3072:gmS+/m2wCA4NESxvFTG4HAlIZ5FW33rvfmMIWcdsz:gmQuESRNG4HPZ5FYrvfm8cdsz
Score9/10-
Contacts a large (86555) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Changes its process name
-
Enumerates running processes
Discovers information about currently running processes on the system
-