General
- Target 1ca241a8f6e035693dca09a061b79899.sample
- Size 90KB
- Sample260910-tjpk4sdp9z
- SHA256 5ec2ea71522b49b79da88f266002e8a501e617832d765d4786fd43ec2afd7dd6
- MD5 998ae3afbb46451dea2dc6f5bfcb35ac
- SHA1 f74a0d9f1835d29324176b08115245cdd178dd35
- SHA512 4114de86f47c0136312c908c2c2edb1ff415c8f0dffdad2b44b3214d0d8839ed7d3f496b6a805b3f25dfeca7ebb577abfc804fff1fe89b04b9c87b9f09ec39d4
- SSDEEP 1536:698ugxbWduThmzunIvpYkpebVl6LI+bairDlAs1+ls00T9WsV0xL5R:6cxaduRnIhL2Vl+bVJX1HhWsV0xLn
- TLSH T1329301B95918DFFEF5224EE75D99ED48492B406910AA17A42D0AB708387FCCD498E32C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
c901af1db6044a0532694b9c8a0b8c1e4249373d2e3b86f100e5ba14c78f6d84
Resource
debian12-mipsel-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target c901af1db6044a0532694b9c8a0b8c1e4249373d2e3b86f100e5ba14c78f6d84
- Size 239KB
- SHA256 c901af1db6044a0532694b9c8a0b8c1e4249373d2e3b86f100e5ba14c78f6d84
- MD5 1ca241a8f6e035693dca09a061b79899
- SHA1 7ae701c632a7972abd213fadfb98fcea32391721
- SHA512 f2c3f8255b6dbd2ecf97a526dd40d477bdfa9fa4ee5755120805c65bddc6cd1434ccec2f4faceb27cc3ccaedf15088ff397e18d072a47ecfb604dbca939dc0fa
- SSDEEP 3072:a8R5woc6tuoPQKROL/r5VF4CNsIzi975YGwNhZCIEI:HR5RdAmQ+A5RCci9GDT
- TLSH T1F134F70AAB610FFBDC6BDD3701E91B0624CCA41722A52F767278D918F94A54F4AD3C78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.