General

  • Target

    huhu.mips.elf

  • Size

    189KB

  • Sample

    240129-grfxqabfa9

  • MD5

    ae896eef7e082d29122f74516b1d7835

  • SHA1

    bd7dc2cf482ce30eade88d1d8d21eed5d88a7cb8

  • SHA256

    5dbe3a25a374464dbf859c31e059b6c2bcc7f9af9442543f2ccae53e07010cfe

  • SHA512

    9d2de14735bb53aac5413e85e9c24edf4500f5a5f1869958e95cbaf8772f505b7470036f55f44715c5f91f1647d83cd890fe573831822bf9aee1707b7ae707ac

  • SSDEEP

    3072:wkPTg1OKvBpz3wviY1bOhxcLW6mg+XCS859OxYo:wwU1BgUL9hg+78DOio

Score
10/10

Malware Config

Targets

    • Target

      huhu.mips.elf

    • Size

      189KB

    • MD5

      ae896eef7e082d29122f74516b1d7835

    • SHA1

      bd7dc2cf482ce30eade88d1d8d21eed5d88a7cb8

    • SHA256

      5dbe3a25a374464dbf859c31e059b6c2bcc7f9af9442543f2ccae53e07010cfe

    • SHA512

      9d2de14735bb53aac5413e85e9c24edf4500f5a5f1869958e95cbaf8772f505b7470036f55f44715c5f91f1647d83cd890fe573831822bf9aee1707b7ae707ac

    • SSDEEP

      3072:wkPTg1OKvBpz3wviY1bOhxcLW6mg+XCS859OxYo:wwU1BgUL9hg+78DOio

    Score
    9/10
    • Contacts a large (112160) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

    • Changes its process name

    • Enumerates running processes

      Discovers information about currently running processes on the system

MITRE ATT&CK Enterprise v15

Tasks