General
- Target 2.elf
- Size 133KB
- Sample250103-hqx1aawnhk
- SHA256 8a01b161ff3a8a6a92559bbf5c6f25ee31d1f0fd168376a096a2b6be08c9ea32
- MD5 2a4304691181ec4046d714aad7b88af8
- SHA1 cfa1b9841e7021e8bb3892680991035fde4a9ff4
- SHA512 47b520b10d8088550222bc8a355977100082256636ede46540e9b2eb0491a2c7021dd10943df7fcf9cfffb75c281005a24f0ee03b8ce3ba32dbc8f4e818ba9dc
- SSDEEP 1536:miYZJjxMufWR+PRAzCPGT/Llw1Zbp2rjxQm9VfLo9T7LFb/:mdWR+PRAbV2xD
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
2.elf
Resource
debian12-mipsel-20240221-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target 2.elf
- Size 133KB
- SHA256 8a01b161ff3a8a6a92559bbf5c6f25ee31d1f0fd168376a096a2b6be08c9ea32
- MD5 2a4304691181ec4046d714aad7b88af8
- SHA1 cfa1b9841e7021e8bb3892680991035fde4a9ff4
- SHA512 47b520b10d8088550222bc8a355977100082256636ede46540e9b2eb0491a2c7021dd10943df7fcf9cfffb75c281005a24f0ee03b8ce3ba32dbc8f4e818ba9dc
- SSDEEP 1536:miYZJjxMufWR+PRAzCPGT/Llw1Zbp2rjxQm9VfLo9T7LFb/:mdWR+PRAbV2xD
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (35316) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.