Overview

overview

9

Static

static

1

mips.elf

debian-9-mips

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    mips.elf

  • Size

    99KB

  • Sample

    241017-h2x5esxbqf

  • MD5

    f5eb5cb764164b7bab234ee7bcd7d72a

  • SHA1

    07dc3e8f2f866b02abae292983b82c45b4bdef25

  • SHA256

    f9f41076b3f96214da8a0c0c4b5ca5ef56c4e9525106828cad88c25219daec7d

  • SHA512

    b0573c0b32ed0c43aa5f3595cf32beb816a432e9ab846ab574cddad75af9d14bb6c79cfd79410569cf24196978fc8aa512aa7eb890fab80f9f3c793a4ce41002

  • SSDEEP

    1536:hK2Qwv65OeRu/eoxULbcLbETLbHUawcDudvE6V90eebeDy6ZIJeoFIrBgk:jQ9OeRu/FxOv+86VQbeDy6SriBN

Score
9/10
defense_evasiondiscovery

Malware Config

Targets

    • Target

      mips.elf

    • Size

      99KB

    • MD5

      f5eb5cb764164b7bab234ee7bcd7d72a

    • SHA1

      07dc3e8f2f866b02abae292983b82c45b4bdef25

    • SHA256

      f9f41076b3f96214da8a0c0c4b5ca5ef56c4e9525106828cad88c25219daec7d

    • SHA512

      b0573c0b32ed0c43aa5f3595cf32beb816a432e9ab846ab574cddad75af9d14bb6c79cfd79410569cf24196978fc8aa512aa7eb890fab80f9f3c793a4ce41002

    • SSDEEP

      1536:hK2Qwv65OeRu/eoxULbcLbETLbHUawcDudvE6V90eebeDy6ZIJeoFIrBgk:jQ9OeRu/FxOv+86VQbeDy6SriBN

    Score
    9/10
    defense_evasiondiscovery

    • Contacts a large (24655) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Deletes itself

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks