General
-
Target
cf0f91ffe3af5f43475503df6f29970d4e5afc0643ff56ffc5efabf5ad1b6806.elf
-
Size
158KB
-
Sample
240702-chntrawcmr
-
MD5
37e6b4d93ace5aa57958fdb1a0c2d167
-
SHA1
ed21d4dcb236668523c67dac83158a50611c3819
-
SHA256
cf0f91ffe3af5f43475503df6f29970d4e5afc0643ff56ffc5efabf5ad1b6806
-
SHA512
38bdd4c46bd65c449a3be98a6f7bd3ac50578c588df964a279e1f3c9bb15d56cc1063ea357b4c838306c1ea4ec2a03a249e0ae23eb98dbdc9c9ec56883494e19
-
SSDEEP
3072:qtcVJ5G24rM7rFcLpsB4QIfgrUMnXNhO2qJCh5tdtczy9RP3Ql51eAFb1laWh3:qSg24I7rFxdIfgrUfsd0y9RP3Ql51ZFB
Static task
static1
Behavioral task
behavioral1
Sample
cf0f91ffe3af5f43475503df6f29970d4e5afc0643ff56ffc5efabf5ad1b6806.elf
Resource
debian9-mipsbe-20240611-en
Malware Config
Targets
-
-
Target
cf0f91ffe3af5f43475503df6f29970d4e5afc0643ff56ffc5efabf5ad1b6806.elf
-
Size
158KB
-
MD5
37e6b4d93ace5aa57958fdb1a0c2d167
-
SHA1
ed21d4dcb236668523c67dac83158a50611c3819
-
SHA256
cf0f91ffe3af5f43475503df6f29970d4e5afc0643ff56ffc5efabf5ad1b6806
-
SHA512
38bdd4c46bd65c449a3be98a6f7bd3ac50578c588df964a279e1f3c9bb15d56cc1063ea357b4c838306c1ea4ec2a03a249e0ae23eb98dbdc9c9ec56883494e19
-
SSDEEP
3072:qtcVJ5G24rM7rFcLpsB4QIfgrUMnXNhO2qJCh5tdtczy9RP3Ql51eAFb1laWh3:qSg24I7rFxdIfgrUfsd0y9RP3Ql51ZFB
Score9/10-
Contacts a large (71829) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder
-