Overview

overview

10

Static

static

10

KKveTTgaAA...ps.elf

debian-9-mips

9

Sharing

Copy URL Twitter E-mail

General

  • Target

    KKveTTgaAAsecNNaaaa.mips.elf

  • Size

    98KB

  • Sample

    240820-tmx2navfmr

  • MD5

    9f86aeb66367ad02f22fbc926c6c8987

  • SHA1

    f6d58bc6c8469b0edce94be7dedc63bf44e1cdea

  • SHA256

    f346a3c9f8d6ad626f820f1d009ca3059e9fac6f260aa63a861fdb247f7b6526

  • SHA512

    3f21adac2637605067197807217aea710fa94d16d42ae36630119305d7c66f231e0fde66abf96def63f0d06018351f126da14bb801540d4edbe75c8364ff9bc5

  • SSDEEP

    1536:FIPW9MIA6KTsn8K30hfOr3I8bhOYzsFMJq0TTo2QoM3Wqje:KO9jA6KhK3eOr48bhbooq0TTo2QoM3z6

Score
10/10
miraidiscovery

Malware Config

Targets

    • Target

      KKveTTgaAAsecNNaaaa.mips.elf

    • Size

      98KB

    • MD5

      9f86aeb66367ad02f22fbc926c6c8987

    • SHA1

      f6d58bc6c8469b0edce94be7dedc63bf44e1cdea

    • SHA256

      f346a3c9f8d6ad626f820f1d009ca3059e9fac6f260aa63a861fdb247f7b6526

    • SHA512

      3f21adac2637605067197807217aea710fa94d16d42ae36630119305d7c66f231e0fde66abf96def63f0d06018351f126da14bb801540d4edbe75c8364ff9bc5

    • SSDEEP

      1536:FIPW9MIA6KTsn8K30hfOr3I8bhOYzsFMJq0TTo2QoM3Wqje:KO9jA6KhK3eOr48bhbooq0TTo2QoM3z6

    Score
    9/10
    discovery

    • Contacts a large (23824) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks