Overview

overview

10

Static

static

10

19193e4a95...65.elf

debian-9-mips

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    19193e4a959d4fa5c8a250cdcc3e298758e006c3d32f6ffc6febce9d7cdcf365.elf
  • Size 300KB
  • Sample260915-gpcsaazva1
  • SHA256 19193e4a959d4fa5c8a250cdcc3e298758e006c3d32f6ffc6febce9d7cdcf365
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
upxbotnetmozi

Malware Config

Signatures

  • Family: Mozi, Mozi Botnet

    Mozi aka MoziBotnet is a multi-platform linux botnet targeting IoT devices.

    botnetmozi
  • Detects Mozi Payload 1 IoCs
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

File Explorer

  • 19193e4a959d4fa5c8a250cdcc3e298758e006c3d32f6ffc6febce9d7cdcf365.elf
    .elf 300KB

19193e4a959d4fa5c8a250cdcc3e298758e006c3d32f6ffc6febce9d7cdcf365.elf

  • SHA256 19193e4a959d4fa5c8a250cdcc3e298758e006c3d32f6ffc6febce9d7cdcf365
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxmipsbe

  • Detects Mozi Payload

  • Patched UPX-packed file

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx