General
- Target b6077abbde37346a2d74fcb67fc632d5a99c7d47995d48f3db5d0e7c0010bde3.bin
- Size 898KB
- Sample260503-xts8tsbs3n
- SHA256 b6077abbde37346a2d74fcb67fc632d5a99c7d47995d48f3db5d0e7c0010bde3
- MD5 1715bab3ce94012c8caeadf6ca3e0d39
- SHA1 9f78f3b5aefb65fe2cb5105f75d4a4d2600bb4eb
- SHA512 f8bafa211b442d763786d911b3a0aa874cc6d57c16d02119b5d155042ec67c9bc54e76251aeb8ab2ac7ad790407d05b12ab1f2a2bfcaa6bf024ff1103b718d5d
- SSDEEP 12288:qb143S0q+8eXS1/f2Wc3slC3yjTjMv+9XSJhBXEsV3b9gh4J8zMSv7MzOup8MplT:qmShf4OTjMgXSJhBXEsVrmz9MOup1Khk
- TLSH T1D7155B653700EF5EF39DE27108F287E046D125F31AD24296A278C71C6EE161D28AFDE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
b6077abbde37346a2d74fcb67fc632d5a99c7d47995d48f3db5d0e7c0010bde3.bin
Resource
debian9-mipsbe-20260126-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target b6077abbde37346a2d74fcb67fc632d5a99c7d47995d48f3db5d0e7c0010bde3.bin
- Size 898KB
- SHA256 b6077abbde37346a2d74fcb67fc632d5a99c7d47995d48f3db5d0e7c0010bde3
- MD5 1715bab3ce94012c8caeadf6ca3e0d39
- SHA1 9f78f3b5aefb65fe2cb5105f75d4a4d2600bb4eb
- SHA512 f8bafa211b442d763786d911b3a0aa874cc6d57c16d02119b5d155042ec67c9bc54e76251aeb8ab2ac7ad790407d05b12ab1f2a2bfcaa6bf024ff1103b718d5d
- SSDEEP 12288:qb143S0q+8eXS1/f2Wc3slC3yjTjMv+9XSJhBXEsV3b9gh4J8zMSv7MzOup8MplT:qmShf4OTjMgXSJhBXEsVrmz9MOup1Khk
- TLSH T1D7155B653700EF5EF39DE27108F287E046D125F31AD24296A278C71C6EE161D28AFDE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Family: Prometei
Prometei is a multiplatform botnet used to mine cryptocurrency.
-
Prometei payload
-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system