General
-
Target
2b671c0e7ee1068632e6d2ff298c7486.bin
-
Size
43KB
-
Sample
241222-bg4cdaxlek
-
MD5
1a060b6f1a498a1da3c6c8fdb61959df
-
SHA1
1e44bf8171ecc332dd6d80b599a078461576d807
-
SHA256
93df3f63d22c17aa06891eb4be9f827c09f3282b8d34df90f39ca1bf6be7c124
-
SHA512
eb4bb402d19529dec29023c0a3870d8917c22f96893ef578d4f60abc9c9c62d20c3a27a8edc6f7a28e8aa5116588d05906e6db01b66edc9e3c48ad702df4ea36
-
SSDEEP
768:1uxXFowPS47gTpBxTXbvaZCG0S0szEkjFe/Y9fB/BCMoUzoObYzXG1MFhZ85pADU:1SPS4Mbva701WEkB5/cMoUzoOgW1MF8B
Behavioral task
behavioral1
Sample
b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24.elf
Resource
debian9-mipsel-20240226-en
Malware Config
Extracted
mirai
BOTNET
Targets
-
-
Target
b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24.elf
-
Size
95KB
-
MD5
2b671c0e7ee1068632e6d2ff298c7486
-
SHA1
dc3d668edbe45dedc44460ec4878c0025063de01
-
SHA256
b1afe19d92ceafc19868ceaaff7ca91d415f7e02106e127a21e0944e2ebf9f24
-
SHA512
d8e546396aebd33072b47fb5a0608c30ceae15524fb48f03deec2325e881959dd724d6deda9eb363ffc8484bbad6dd0335dd2f0b1f75ac54838e752d12a15843
-
SSDEEP
1536:69gBeHbiMX4cHa0aZL/TsUAd/7MnneIOAPZ6y1Dib9pJkq5ODXuzALzZ:69gBqtXpHgCzMnneI3P012XuzA5
Score9/10-
Contacts a large (271608) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-