General
-
Target
7cabc7d9ac4490fb547415bdf7269c33.bin
-
Size
245KB
-
Sample
240426-bvp2xagh5v
-
MD5
e02e2189ca96b07b3cc308b581dbbacc
-
SHA1
3098deb1eb57c52d06240284617015a59cc70e19
-
SHA256
e3bcc4bc2b226cb2ce47586fcbde9e8a7f372f172b7b864782b28f34b324c44c
-
SHA512
889b7e3753db75af8d4f7355d7a7de4c78eb9cb89e537a381f6072bedb619e01fca8a3b1c6c035a6741b86830cc82ab672a14caee97393be95f2b3aee3a60381
-
SSDEEP
6144:10Lw1eU0t1HMHe5H7Ie7SP4Bujb9veyHSFsZp9e:1gKeUy1HuyEe7hub9oep9e
Behavioral task
behavioral1
Sample
ed6964fb655c02b74298d9b1a979921abb3dfd42565084053593123af9259f79.elf
Resource
debian9-mipsbe-20240226-en
Malware Config
Targets
-
-
Target
ed6964fb655c02b74298d9b1a979921abb3dfd42565084053593123af9259f79.elf
-
Size
590KB
-
MD5
7cabc7d9ac4490fb547415bdf7269c33
-
SHA1
ac72e44f7e7a30727d356b3c5e00317d09ad94e9
-
SHA256
ed6964fb655c02b74298d9b1a979921abb3dfd42565084053593123af9259f79
-
SHA512
4e5b86721e06d57e465c2b5353c9427c600f4896b1b073ab889f1f5c36574ed3326c7d2038585106fd4226db33e5f7d252c921a7e5646d70a1e30d5bec0e56e5
-
SSDEEP
6144:PnRWqReH3BRzqfMC5fuUQh8+Qk8jVJntQf2Avz156Vmw3lgUekJGmOa2j1DluC9s:5UJz9emvo70Tlu0qXK0
Score10/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
-
Writes file to system bin folder
-