General
- Target pmips.elf
- Size 235KB
- Sample260910-m7myvssbpb
- SHA256 2dc81ec7d0dd73720f11448f2abe6cb7f73bcdc554a86be79817a12e13b230d9
- MD5 fb6e61c347b7a54246905f7a0a706637
- SHA1 7879133e81517c714730df51a7a821092a68e4b5
- SHA512 719a87b4b2aab8b93efb63affb92660353b5186cc23958f842bb200f9bafa55c8217f1652a6a31482dd458050d7984e0a9985b16e9419c52613ae3a7d480eb21
- SSDEEP 3072:v3wvRCMEpo16v9Z9sIn09SQPM9kaob4qyC51gOUo:v3wvcTK1G0YQkuazqyiP1
- TLSH T1C634C71F6E228F6EF269CB7447F74D35975923D726E1D680D2ACC2101E6038E641FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
pmips.elf
Resource
debian9-mipsbe-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target pmips.elf
- Size 235KB
- SHA256 2dc81ec7d0dd73720f11448f2abe6cb7f73bcdc554a86be79817a12e13b230d9
- MD5 fb6e61c347b7a54246905f7a0a706637
- SHA1 7879133e81517c714730df51a7a821092a68e4b5
- SHA512 719a87b4b2aab8b93efb63affb92660353b5186cc23958f842bb200f9bafa55c8217f1652a6a31482dd458050d7984e0a9985b16e9419c52613ae3a7d480eb21
- SSDEEP 3072:v3wvRCMEpo16v9Z9sIn09SQPM9kaob4qyC51gOUo:v3wvcTK1G0YQkuazqyiP1
- TLSH T1C634C71F6E228F6EF269CB7447F74D35975923D726E1D680D2ACC2101E6038E641FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.