General
- Target nklmips.elf
- Size 88KB
- Sample251228-aj4v9abl2x
- SHA256 5af9d2c540916f9b6c8f84152a33addfe1c718a3e7877bdb0dd703f47f032d4c
- MD5 614b88a48d652f3266e6f05db1abe87d
- SHA1 20127a39e5b136f2fed8df5d3fd456660f62275a
- SHA512 c5ecb959cc2aff9a2bd329c6350844c09f3124a7f2059a465695b3e869a33ffcfdfc5cde56c3cfedc3ce874dc992cd5232a015e25171f1c29164a26ebd12001f
- SSDEEP 1536:jxm4HCNuVOVFGiOkOOK4OOOd/xSjfIPfbikuh7R2d:84HIuVObsxSs7ikuhK
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nklmips.elf
Resource
debian9-mipsbe-20251223-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target nklmips.elf
- Size 88KB
- SHA256 5af9d2c540916f9b6c8f84152a33addfe1c718a3e7877bdb0dd703f47f032d4c
- MD5 614b88a48d652f3266e6f05db1abe87d
- SHA1 20127a39e5b136f2fed8df5d3fd456660f62275a
- SHA512 c5ecb959cc2aff9a2bd329c6350844c09f3124a7f2059a465695b3e869a33ffcfdfc5cde56c3cfedc3ce874dc992cd5232a015e25171f1c29164a26ebd12001f
- SSDEEP 1536:jxm4HCNuVOVFGiOkOOK4OOOd/xSjfIPfbikuh7R2d:84HIuVObsxSs7ikuhK
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (54031) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Renames itself