Overview

overview

10

Static

static

8

sample

debian-12-mipsel

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    sample
  • Size 134KB
  • Sample260815-phjw1sff75
  • SHA256 f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
mozibotnetdiscoveryupx

Malware Config

Targets

    • Target
      sample
    • Size 134KB
    • SHA256 f6c97b1e2ed02578ca1066c8235ba4f991e645f89012406c639dbccc6582eec8
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetdiscoverymozi

    • Detects Mozi Payload

    • Family: Mozi, Mozi Botnet

      Mozi aka MoziBotnet is a multi-platform linux botnet targeting IoT devices.

      botnetmozi

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

      discovery
    behavioral1

MITRE ATT&CK Enterprise v16

Tasks