General
- Target nabmips.elf
- Size 69KB
- Sample260125-wc3khacv7d
- SHA256 b0f64475cb10b4918a4402dcea4832e4604982fe508d8948c3d60eb7e37d39de
- MD5 3c2978217fa26b4208a1b3a5cd504968
- SHA1 1801318c0d2b29b1e395b5da8e7cd16c5c7fcd68
- SHA512 0c474e3c2e30f0ecbdebcf9cbcbf61c9dd3889f8d35bd84b28e943648e1ca7871c2a1a72a15c7cb052568e94876311e886129d6578b6ec0158dd889fcd7ade19
- SSDEEP 1536:9+up+ub8uyTzHEScjR0sQSZXx8t2tMqfhFzYQ3xgiPG9AOsTXL4G:CQSyQSZ6PmFz3Bg5sTXLZ
- MD5 SHA1 SHA512 SSDEEP
Score
9/10
Static task
static1
Behavioral task
behavioral1
Sample
nabmips.elf
Resource
debian9-mipsbe-20251231-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target nabmips.elf
- Size 69KB
- SHA256 b0f64475cb10b4918a4402dcea4832e4604982fe508d8948c3d60eb7e37d39de
- MD5 3c2978217fa26b4208a1b3a5cd504968
- SHA1 1801318c0d2b29b1e395b5da8e7cd16c5c7fcd68
- SHA512 0c474e3c2e30f0ecbdebcf9cbcbf61c9dd3889f8d35bd84b28e943648e1ca7871c2a1a72a15c7cb052568e94876311e886129d6578b6ec0158dd889fcd7ade19
- SSDEEP 1536:9+up+ub8uyTzHEScjR0sQSZXx8t2tMqfhFzYQ3xgiPG9AOsTXL4G:CQSyQSZ6PmFz3Bg5sTXLZ
- MD5 SHA1 SHA512 SSDEEP
Score9/10-
Contacts a large (14494) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Deletes itself
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Enumerates running processes
Discovers information about currently running processes on the system