General
-
Target
Hilix.mips.elf
-
Size
71KB
-
Sample
250218-hvpjpszlx2
-
MD5
200e03d27fc14205a10f0d5a030475d9
-
SHA1
188c13983b81ed439c8f0cc12039b465ba6616ca
-
SHA256
acd3c8b0b1ca433037786c16fd2445fbf96bc361d95b892504880f96b59c436d
-
SHA512
af4e5976ca65a8d00654e762593a952549cbbb3f70c42540f450a6698b36378c09a2d183692a77233e0c78d92b2774ea7a200babfb5839b30c1cf7dfeafb3c89
-
SSDEEP
1536:TqmI7+0xc/thwHhPAgOV1/HfYLaBzFrtUJsn9:Wmcm/7I1OV1/QOzFr6Jsn9
Behavioral task
behavioral1
Sample
Hilix.mips.elf
Resource
debian9-mipsbe-20240418-en
Malware Config
Extracted
mirai
SORA
Targets
-
-
Target
Hilix.mips.elf
-
Size
71KB
-
MD5
200e03d27fc14205a10f0d5a030475d9
-
SHA1
188c13983b81ed439c8f0cc12039b465ba6616ca
-
SHA256
acd3c8b0b1ca433037786c16fd2445fbf96bc361d95b892504880f96b59c436d
-
SHA512
af4e5976ca65a8d00654e762593a952549cbbb3f70c42540f450a6698b36378c09a2d183692a77233e0c78d92b2774ea7a200babfb5839b30c1cf7dfeafb3c89
-
SSDEEP
1536:TqmI7+0xc/thwHhPAgOV1/HfYLaBzFrtUJsn9:Wmcm/7I1OV1/QOzFr6Jsn9
Score9/10-
Contacts a large (56059) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-