General
- Target johen.mips.elf
- Size 115KB
- Sample260221-g99mract4c
- SHA256 4bfac56420e108bba9c9366c1279d194f7cd20933bd8e56c57edd2a3ba63205b
- MD5 cfcc1c8a8797b6522e4bd6e7d3d9e85d
- SHA1 1a70d7c05eec2675bd7eb1f6033fb513019de1ff
- SHA512 690f03162cdf72fb19d4b1e497ec6b491a6c3c0a1a78a435bbb712893ee06d670e7bd874c777f94da0a9bb0dbbc31e282d9a08e942b2738b0fbcc763b607c44d
- SSDEEP 1536:aEkWiTLiZECcpHOWWJDmun5Pd1Oe4+YLxlrwTH+E7+TeVedVPneQBZN010an:oni50po9vYNlrwr7+Te0dVPZ010an
- TLSH T1CDB3E84E6F318F7DFBA8C23447B39A21975923D227E2C685D19CDA011E7028E645FBB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
johen.mips.elf
Resource
debian9-mipsbe-20260126-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target johen.mips.elf
- Size 115KB
- SHA256 4bfac56420e108bba9c9366c1279d194f7cd20933bd8e56c57edd2a3ba63205b
- MD5 cfcc1c8a8797b6522e4bd6e7d3d9e85d
- SHA1 1a70d7c05eec2675bd7eb1f6033fb513019de1ff
- SHA512 690f03162cdf72fb19d4b1e497ec6b491a6c3c0a1a78a435bbb712893ee06d670e7bd874c777f94da0a9bb0dbbc31e282d9a08e942b2738b0fbcc763b607c44d
- SSDEEP 1536:aEkWiTLiZECcpHOWWJDmun5Pd1Oe4+YLxlrwTH+E7+TeVedVPneQBZN010an:oni50po9vYNlrwr7+Te0dVPZ010an
- TLSH T1CDB3E84E6F318F7DFBA8C23447B39A21975923D227E2C685D19CDA011E7028E645FBB4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Writes file to system bin folder