General
- Target bot.mips
- Size 1.1MB
- Sample260821-pdm3wazblc
- SHA256 61c38e7b0dfd27215de74d42d2f1b4bd52385782cd084947e74f858cef6acd30
- MD5 a5acdd5a9965042ffe807fe8b1a32347
- SHA1 dd71d25f4617250f45818a8097edb24b3b37c0f4
- SHA512 ec4f8c33c482e7cb500da39b382a9da535a6072c0916afb88ff49d27f214f26ff55830bebb439b53f33b6c16e40f481dec6eaa1553f70a1d3a28326fc93a0c72
- SSDEEP 24576:kFA4PnlJDrgxiDD8sLF4yEG30uy0fh2XzBfTR:OA4nrFDb4yl0u/C9
- TLSH T194457D466372CF8CF354E67002B39A165EA611B326E361C6A2BDD620376125D1CAFFF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bot.mips
Resource
debian9-mipsbe-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target bot.mips
- Size 1.1MB
- SHA256 61c38e7b0dfd27215de74d42d2f1b4bd52385782cd084947e74f858cef6acd30
- MD5 a5acdd5a9965042ffe807fe8b1a32347
- SHA1 dd71d25f4617250f45818a8097edb24b3b37c0f4
- SHA512 ec4f8c33c482e7cb500da39b382a9da535a6072c0916afb88ff49d27f214f26ff55830bebb439b53f33b6c16e40f481dec6eaa1553f70a1d3a28326fc93a0c72
- SSDEEP 24576:kFA4PnlJDrgxiDD8sLF4yEG30uy0fh2XzBfTR:OA4nrFDb4yl0u/C9
- TLSH T194457D466372CF8CF354E67002B39A165EA611B326E361C6A2BDD620376125D1CAFFF4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Traces itself
Traces itself to prevent debugging attempts
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.