General
- Target pmips.elf
- Size 95KB
- Sample260922-er17jsfc73
- SHA256 ec8dc99e36906cdfd88d6bbf0ebe1b409a420fbb8051b30181225bf3e94cd362
- MD5 bf7c11e353ed313c0bb4fdb2e80b0092
- SHA1 8a730eccbca3ffa689d229fc000852c7bfb85cb3
- SHA512 773388447279959b19091edbf8bf4a056c80db51897d7b9d9f2a8609172d5ab47f59694ca0cf06d45312f983bc2602fa85f39e89ff697889323b65181d362dd9
- SSDEEP 1536:yk8NZJjWAanPscve4meOeuCyTPHvwIp/read7Q1Qs/Rd/uP:WZJjBan0zhHvlp/o1F/c
- TLSH T113A3C91E6E218FBDF369C33047B78E21A79837D626E1D685E26CD6011E6034E641FFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
pmips.elf
Resource
debian9-mipsbe-20260513-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
mirai
Botnet
-
MIRAI
Targets
-
- Target pmips.elf
- Size 95KB
- SHA256 ec8dc99e36906cdfd88d6bbf0ebe1b409a420fbb8051b30181225bf3e94cd362
- MD5 bf7c11e353ed313c0bb4fdb2e80b0092
- SHA1 8a730eccbca3ffa689d229fc000852c7bfb85cb3
- SHA512 773388447279959b19091edbf8bf4a056c80db51897d7b9d9f2a8609172d5ab47f59694ca0cf06d45312f983bc2602fa85f39e89ff697889323b65181d362dd9
- SSDEEP 1536:yk8NZJjWAanPscve4meOeuCyTPHvwIp/read7Q1Qs/Rd/uP:WZJjBan0zhHvlp/o1F/c
- TLSH T113A3C91E6E218FBDF369C33047B78E21A79837D626E1D685E26CD6011E6034E641FFA4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system