General
- Target mips.uhavenobotsxd.elf
- Size 128KB
- Sample260102-hs1h7adn4y
- SHA256 10e88373c3fba576754ff519a7d294bbbe66334f3aaf49441e4c954dca8a3dda
- MD5 484eec989edc7e6f899a1f4569e22e03
- SHA1 68ffb13bdf3d83d0efcfe6fbecbfdd7a46b264d9
- SHA512 95ca7d03dcdff38d19e14b1ef87c49156b79935d8b64eba37c676808c6ca9488ea7e50005bce0b9f76a7e7df45b3ed8733ee4f36997fb7ce411fc83d72d2f3c4
- SSDEEP 3072:BIZQYNKD2BasPJ8wQ/ipjPgA2vkt/dXjg6f9EECLzqTqZgW0iQLNtplQy:Bl8C/q2aLLfpuy
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
mips.uhavenobotsxd.elf
Resource
debian9-mipsbe-20251231-en
Malware Config
Targets
-
- Target mips.uhavenobotsxd.elf
- Size 128KB
- SHA256 10e88373c3fba576754ff519a7d294bbbe66334f3aaf49441e4c954dca8a3dda
- MD5 484eec989edc7e6f899a1f4569e22e03
- SHA1 68ffb13bdf3d83d0efcfe6fbecbfdd7a46b264d9
- SHA512 95ca7d03dcdff38d19e14b1ef87c49156b79935d8b64eba37c676808c6ca9488ea7e50005bce0b9f76a7e7df45b3ed8733ee4f36997fb7ce411fc83d72d2f3c4
- SSDEEP 3072:BIZQYNKD2BasPJ8wQ/ipjPgA2vkt/dXjg6f9EECLzqTqZgW0iQLNtplQy:Bl8C/q2aLLfpuy
- MD5 SHA1 SHA512 SSDEEP
Mirai family
Executes dropped EXE
Creates/modifies Cron job
Cron allows running tasks on a schedule, and is commonly used for malware persistence.
Creates/modifies environment variables
Creating/modifying environment variables is a common persistence mechanism.
Enumerates running processes
Discovers information about currently running processes on the system
Write file to user bin folder
Modifies Bash startup script
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
3Boot or Logon Initialization Scripts
2RC Scripts
2Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1Privilege Escalation
Boot or Logon Autostart Execution
3Boot or Logon Initialization Scripts
2RC Scripts
2Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Scheduled Task/Job
1Cron
1