General
-
Target
c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22.elf
-
Size
83KB
-
Sample
241221-dkvwhs1phm
-
MD5
9232a514454eaa6e6d5a4a742a9c4fdd
-
SHA1
1af8a8b2d2138b901524f1286e9402e59ffb4512
-
SHA256
c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22
-
SHA512
49b5e2ceefb72dffb2e196d5358a97d159ba9ddeb5f241e0ff432985b1e95fcb30453c8ebad1d2e2f62de4b83b6936dca2d78ad3c243cf3ea9cdd177970c14aa
-
SSDEEP
1536:IjEf1x6aVaqVazoaUIFt2A+yDgBqviTx3Sifel8owsJef4pnwgfzv/:Lfn6HtJgSi8iuwsSgfzv/
Behavioral task
behavioral1
Sample
c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22.elf
Resource
debian9-mipsbe-20240611-en
Malware Config
Extracted
mirai
BOTNET
Targets
-
-
Target
c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22.elf
-
Size
83KB
-
MD5
9232a514454eaa6e6d5a4a742a9c4fdd
-
SHA1
1af8a8b2d2138b901524f1286e9402e59ffb4512
-
SHA256
c1916587699fe975eb4d206cedb6be5dbae99ad4ea8426f08117c7f23dbb7d22
-
SHA512
49b5e2ceefb72dffb2e196d5358a97d159ba9ddeb5f241e0ff432985b1e95fcb30453c8ebad1d2e2f62de4b83b6936dca2d78ad3c243cf3ea9cdd177970c14aa
-
SSDEEP
1536:IjEf1x6aVaqVazoaUIFt2A+yDgBqviTx3Sifel8owsJef4pnwgfzv/:Lfn6HtJgSi8iuwsSgfzv/
Score9/10-
Contacts a large (194543) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-