Overview

overview

10

Static

static

10

0591f666b8...ad.elf

debian-12-mipsel

9

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0a725ea365df367fd47614b56392f5bc.bin

  • Size

    27KB

  • Sample

    241217-bc1qpavqfz

  • MD5

    feb02025c1c852cb67feb9bca2f81294

  • SHA1

    e4cb60fba0c38ee9aa83bcd3f763719085320f56

  • SHA256

    422ad4152becb7394a85343c6e439ebf4ffc550f679f5b65b4f2aca0d64ffb97

  • SHA512

    9fc7758335177958b4285619a9662f4c11d2369602efc82cce35f9b9ce20053a0b55b355cc6e70a29d24f804835b28e754d0a763ec710e45cc1c63310992a65d

  • SSDEEP

    768:xjRLgo41l5HWQj52BhQUd43AqG4RREzPtZi1:xj6j5L5xwzR4RRELtZi

Score
10/10
miraidefense_evasiondiscovery

Malware Config

Targets

    • Target

      0591f666b878be00bc5690bf81db432374e37ebaf931a13699e0f0485d5b75ad.elf

    • Size

      66KB

    • MD5

      0a725ea365df367fd47614b56392f5bc

    • SHA1

      11909c82c305ba1c686b4caa69724f443c933374

    • SHA256

      0591f666b878be00bc5690bf81db432374e37ebaf931a13699e0f0485d5b75ad

    • SHA512

      b533f738b27535a1a7f577952e46212b92d399b4669ee7145f791adfa9c0d8b3d92abb2101e28d70804b9cf93c77234da87477a78bd3776de7273dd803139c58

    • SSDEEP

      1536:QLCPsY4qBhc+fJC8H1BBSpmUYIJgt/W1s6Wc:Q0svqBhdH12LJgtee6W

    Score
    9/10
    defense_evasiondiscovery

    • Contacts a large (680719) amount of remote hosts

      This may indicate a network scan to discover remotely running services.

      discovery

    • Creates a large amount of network flows

      This may indicate a network scan to discover remotely running services.

      discovery

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks