Overview

overview

10

Static

static

8

bin.sh

debian-9-mips

10

Resubmissions

13/09/2026, 19:08

260913-xtnncavwbz10

12/09/2026, 12:13

260912-pd7saabd748

12/09/2026, 12:09

260912-pbr9tagq2w10

12/09/2026, 12:08

260912-pax4nsbc8510

12/09/2026, 12:07

260912-pan6rswere8

12/09/2026, 12:07

260912-paembsyxfs8

10/09/2026, 22:49

260910-2rnmsafa2510

10/09/2026, 22:44

260910-2nsgkahn6s10

10/09/2026, 22:43

260910-2nhx5ahn5x10

10/09/2026, 00:10

260910-af6wfasdka10

Sharing

Copy URL Twitter E-mail

General

  • Target
    bin.sh
  • Size 132KB
  • Sample260910-af6wfasdka
  • SHA256 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
mozibotnetdefense_evasiondiscoveryupx

Malware Config

Targets

    • Target
      bin.sh
    • Size 132KB
    • SHA256 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    botnetdefense_evasiondiscoverymozi

    • Detects Mozi Payload

    • Family: Mozi, Mozi Botnet

      Mozi aka MoziBotnet is a multi-platform linux botnet targeting IoT devices.

      botnetmozi

    • Modifies Watchdog functionality

      Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

      defense_evasion

    • Enumerates active TCP sockets

      Gets active TCP sockets from /proc virtual filesystem.

      discovery

    • Enumerates running processes

      Discovers information about currently running processes on the system

    • Reads system routing table

      Gets active network interfaces from /proc virtual filesystem.

      discovery

    • Writes file to system bin folder

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks