General
- Target d628410bd091bdf2d19440a88a077615490461ab6c50df9c18153a2856d077c1.bin
- Size 898KB
- Sample260504-cf43ysbs61
- SHA256 d628410bd091bdf2d19440a88a077615490461ab6c50df9c18153a2856d077c1
- MD5 1b492d611ea5dbd85e1621912bf5e8f9
- SHA1 50a8c0db2e22245d792f483624b81383d90112f3
- SHA512 8924deb03178d5d6443c47830f7f94cd13757ae9054d5cffbcad858e3b3a72bd18ff1b595eecda559bdec34806d148a3e7f8f38a273c76f007901bad54ed0aea
- SSDEEP 12288:qb143S0q+8eXS1/f2Wc3slC3yjTjMv+9XSJhBXEsV3b9gh4J8zMSv7MzOup8MplG:qmShf4OTjMgXSJhBXEsVrmz9MOup1KhZ
- TLSH T1D9155B653700EF5EF39DE27108F287E046D125F31AD24296A278C71C6EE161D28AFDE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
d628410bd091bdf2d19440a88a077615490461ab6c50df9c18153a2856d077c1.bin
Resource
debian9-mipsbe-20260126-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target d628410bd091bdf2d19440a88a077615490461ab6c50df9c18153a2856d077c1.bin
- Size 898KB
- SHA256 d628410bd091bdf2d19440a88a077615490461ab6c50df9c18153a2856d077c1
- MD5 1b492d611ea5dbd85e1621912bf5e8f9
- SHA1 50a8c0db2e22245d792f483624b81383d90112f3
- SHA512 8924deb03178d5d6443c47830f7f94cd13757ae9054d5cffbcad858e3b3a72bd18ff1b595eecda559bdec34806d148a3e7f8f38a273c76f007901bad54ed0aea
- SSDEEP 12288:qb143S0q+8eXS1/f2Wc3slC3yjTjMv+9XSJhBXEsV3b9gh4J8zMSv7MzOup8MplG:qmShf4OTjMgXSJhBXEsVrmz9MOup1KhZ
- TLSH T1D9155B653700EF5EF39DE27108F287E046D125F31AD24296A278C71C6EE161D28AFDE9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Family: Prometei
Prometei is a multiplatform botnet used to mine cryptocurrency.
Prometei payload
Deletes itself
Enumerates running processes
Discovers information about currently running processes on the system