General
- Target pmips.elf
- Size 95KB
- Sample260422-vhpp6act2r
- SHA256 ec068220033a4cddef8358039db341a33937a75f59d89453c8a1bee3f5840554
- MD5 8b545115c9b219d67bc3e2e2d45bc7c7
- SHA1 c6b39f4ac5b3513416f6b90f5584231a8be348f0
- SHA512 11edf8fd91143e8278bf75a332e1468f74fbd3809c4ded2253cb470ac92f3a73aab87c4bc609bae97712d5a20afd90a66cd5bde8abb181bbc1d34495929045d3
- SSDEEP 1536:yk8NZJjWAaUP/cve4meOeuCyTPHvwIp/read7Q1Qs/Rd/uP:WZJjBaUnzhHvlp/o1F/c
- TLSH T1DDA3C91E6E218FBDF369C33047B78E21A79837D626E1D685E26CD6011E6034E641FFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
pmips.elf
Resource
debian9-mipsbe-20260126-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
MIRAI
Targets
-
- Target pmips.elf
- Size 95KB
- SHA256 ec068220033a4cddef8358039db341a33937a75f59d89453c8a1bee3f5840554
- MD5 8b545115c9b219d67bc3e2e2d45bc7c7
- SHA1 c6b39f4ac5b3513416f6b90f5584231a8be348f0
- SHA512 11edf8fd91143e8278bf75a332e1468f74fbd3809c4ded2253cb470ac92f3a73aab87c4bc609bae97712d5a20afd90a66cd5bde8abb181bbc1d34495929045d3
- SSDEEP 1536:yk8NZJjWAaUP/cve4meOeuCyTPHvwIp/read7Q1Qs/Rd/uP:WZJjBaUnzhHvlp/o1F/c
- TLSH T1DDA3C91E6E218FBDF369C33047B78E21A79837D626E1D685E26CD6011E6034E641FFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system