General
- Target nklmips.elf
- Size 74KB
- Sample260106-a3bc2sbj9v
- SHA256 b873558bf89dfc0a83a87b252a5c2cef23f3fef21ccf21dcfb7b3dfdbd3803a8
- MD5 5bd1928fd97a89c258b79c89b5886850
- SHA1 9fc7c38a28915002c85835699c187bb7db9df974
- SHA512 e628de0f49b2338a7fbdf9481f14271d4bd07ad576225fc25f112f6058269be8d5263a7461257abc8f87fcc58bd79c4a07b0402402e4453101fd544d56413513
- SSDEEP 1536:+94Xn4aNHqaVKLnqxvwT6a/Iv/+9v//RD3LnFDIXup7RxG:W44AHqaVFFu3LnFkXup6
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nklmips.elf
Resource
debian9-mipsbe-20251231-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target nklmips.elf
- Size 74KB
- SHA256 b873558bf89dfc0a83a87b252a5c2cef23f3fef21ccf21dcfb7b3dfdbd3803a8
- MD5 5bd1928fd97a89c258b79c89b5886850
- SHA1 9fc7c38a28915002c85835699c187bb7db9df974
- SHA512 e628de0f49b2338a7fbdf9481f14271d4bd07ad576225fc25f112f6058269be8d5263a7461257abc8f87fcc58bd79c4a07b0402402e4453101fd544d56413513
- SSDEEP 1536:+94Xn4aNHqaVKLnqxvwT6a/Iv/+9v//RD3LnFDIXup7RxG:W44AHqaVFFu3LnFkXup6
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (174226) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Renames itself