General
- Target mips.elf
- Size 86KB
- Sample260122-c8zzpsbx4c
- SHA256 2991389b73f7ecd13232aa10a5e48e1df2a67e142db2bb6cc58b17b73f0c6d7c
- MD5 3825c7763eeca1708988e2bfcb2a9d42
- SHA1 fee8b48a49f886c377d08a4bad944ed59ebff9a9
- SHA512 841d90f7b9e5ed35a3d4ca0265cda12ed27d703f2871665782bd55cc414a4125e41bd1800186f3e89b39c1c56e9949c77d89a7c8d82cb028e69bd3897966b2b5
- SSDEEP 1536:QGyzcKh1oNtJKWbQ86Wq5jkH7x8v3+IRejUR8Xh+Bugvt+JBT3MPQE:QGIcKbitX6W0jud1IRejUsh+sU+P3nE
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20251231-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target mips.elf
- Size 86KB
- SHA256 2991389b73f7ecd13232aa10a5e48e1df2a67e142db2bb6cc58b17b73f0c6d7c
- MD5 3825c7763eeca1708988e2bfcb2a9d42
- SHA1 fee8b48a49f886c377d08a4bad944ed59ebff9a9
- SHA512 841d90f7b9e5ed35a3d4ca0265cda12ed27d703f2871665782bd55cc414a4125e41bd1800186f3e89b39c1c56e9949c77d89a7c8d82cb028e69bd3897966b2b5
- SSDEEP 1536:QGyzcKh1oNtJKWbQ86Wq5jkH7x8v3+IRejUR8Xh+Bugvt+JBT3MPQE:QGIcKbitX6W0jud1IRejUsh+sU+P3nE
- MD5 SHA1 SHA512 SSDEEP
Score7/10Renames itself
Enumerates running processes
Discovers information about currently running processes on the system
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.