General
- Target sora.mips.elf
- Size 170KB
- Sample260312-ca533ad15v
- SHA256 ac5ec8e7ef682c556c05647745304864f7cb68f86d6460d1336757a62346ed76
- MD5 8de6d51e1bc4515b85dac04dd827e5be
- SHA1 ec30bb3ab4ebb85490d5210af864a2076447eb7e
- SHA512 ea20bdc31505b08ac58da485689a57d7035bd924455529d73e7fc762b53b44a8b1769db337d6a0a7370762f7fb0b184db5db63f450532137afbf93ebaf782e39
- SSDEEP 3072:Y2e+VrVslZGR7ndFORhv1+7LOHTvYO3AQmchAREkNwBtN568sO5N1dJkInOCJGyk:YnvGR7ndFORhv1+7LOHTvYO3AQmchARJ
- TLSH T14304855D6E229F7DFAB8823457B34E20975923E623D1D684D2ACD2001F3029E645FBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
sora.mips.elf
Resource
debian9-mipsbe-20260127-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target sora.mips.elf
- Size 170KB
- SHA256 ac5ec8e7ef682c556c05647745304864f7cb68f86d6460d1336757a62346ed76
- MD5 8de6d51e1bc4515b85dac04dd827e5be
- SHA1 ec30bb3ab4ebb85490d5210af864a2076447eb7e
- SHA512 ea20bdc31505b08ac58da485689a57d7035bd924455529d73e7fc762b53b44a8b1769db337d6a0a7370762f7fb0b184db5db63f450532137afbf93ebaf782e39
- SSDEEP 3072:Y2e+VrVslZGR7ndFORhv1+7LOHTvYO3AQmchAREkNwBtN568sO5N1dJkInOCJGyk:YnvGR7ndFORhv1+7LOHTvYO3AQmchARJ
- TLSH T14304855D6E229F7DFAB8823457B34E20975923E623D1D684D2ACD2001F3029E645FBF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Writes file to system bin folder