General
-
Target
mips.elf
-
Size
87KB
-
Sample
241203-y93ymsyjgj
-
MD5
ef8daf11e4d7f6e5ceb5231e5333b9a7
-
SHA1
3cb74d506ffaca5a3d2b865a41ba8c4a1943ebda
-
SHA256
3010da171a6907ee997460ba49c59b50285b1a9e7acca93759d51f81bf6ff01f
-
SHA512
6091a8a7f6c6f457cf0328e0d3a160eb2f867f6674598bc3afe682928f1e82e81bb307e771331feb808c465bd349690cd013e4ae8a0a8246b81354665c60cf6b
-
SSDEEP
1536:sC5FAh5hytl3jWNU8mr6RdmZozXKzVuMFhFSwACVElNNEEH4uIj:xrAh2tl3jQU8mrImZozXGdACVElN6EYD
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20240611-en
Malware Config
Extracted
mirai
UNSTABLE
Targets
-
-
Target
mips.elf
-
Size
87KB
-
MD5
ef8daf11e4d7f6e5ceb5231e5333b9a7
-
SHA1
3cb74d506ffaca5a3d2b865a41ba8c4a1943ebda
-
SHA256
3010da171a6907ee997460ba49c59b50285b1a9e7acca93759d51f81bf6ff01f
-
SHA512
6091a8a7f6c6f457cf0328e0d3a160eb2f867f6674598bc3afe682928f1e82e81bb307e771331feb808c465bd349690cd013e4ae8a0a8246b81354665c60cf6b
-
SSDEEP
1536:sC5FAh5hytl3jWNU8mr6RdmZozXKzVuMFhFSwACVElNNEEH4uIj:xrAh2tl3jQU8mrImZozXGdACVElN6EYD
Score9/10-
Contacts a large (141765) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder
-