Overview

overview

9

Static

static

1

mips.crdownload

debian-9-mips

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mips.crdownload

  • Size

    77KB

  • Sample

    240801-zscksswemp

  • MD5

    d307ab26126edf7d1bb1797353f63ad8

  • SHA1

    ab737168df696d2894136981cf9a091546f93614

  • SHA256

    330eba4b63b5b7a109ebbb193195eba225eceda35db4a18f13f56b69af8beaa9

  • SHA512

    54a064af0a44567527b00faebfeaaca7fa667199038263afad5a76f7eea8dc295b377f662f6bd6d4f1d20e1c13ca64d8ba2bb0736954c61f0685d6a6e1b8db52

  • SSDEEP

    1536:GR0EuDEkMWrPlmhQ3tEto3k84V6z6vVz2w1bVyZlrkwzS2MynB:DWKrTu2MOB

Score
9/10
discovery

Malware Config

Targets

    • Target

      mips.crdownload

    • Size

      77KB

    • MD5

      d307ab26126edf7d1bb1797353f63ad8

    • SHA1

      ab737168df696d2894136981cf9a091546f93614

    • SHA256

      330eba4b63b5b7a109ebbb193195eba225eceda35db4a18f13f56b69af8beaa9

    • SHA512

      54a064af0a44567527b00faebfeaaca7fa667199038263afad5a76f7eea8dc295b377f662f6bd6d4f1d20e1c13ca64d8ba2bb0736954c61f0685d6a6e1b8db52

    • SSDEEP

      1536:GR0EuDEkMWrPlmhQ3tEto3k84V6z6vVz2w1bVyZlrkwzS2MynB:DWKrTu2MOB

    Score
    9/10
    discovery

    • Contacts a large (22870) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Enumerates running processes

      Discovers information about currently running processes on the system

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks