General
- Target mips2.elf
- Size 293KB
- Sample261003-3ynrsszbkb
- SHA256 e27bc117e8bf2cd8f412a3952fd62c572e942b36f2db6dc641a4a50a4baf1d4c
- MD5 a27716523b819aa878b89c7ebf55ac5a
- SHA1 e0582bc3efc8724f8c415944946a8585ea563256
- SHA512 71492aae53dc4b0b410f80532867f79a073915d8ef8f002993c365c966c1f4d7599d4e37767af7b26da332435888de1b0698cd113dc9fd430d091e76944a3264
- SSDEEP 6144:b6eCupTwZA/CNDepKpo4hkuaTYOkWOZZxOFQ1oYUO5cX0:eef+vhZxzcE
- TLSH T14154B60E6E228F7DF278877447F74A31975C22D226F2D684E1ACD3141E2429E945FBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
mips2.elf
Resource
debian9-mipsbe-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target mips2.elf
- Size 293KB
- SHA256 e27bc117e8bf2cd8f412a3952fd62c572e942b36f2db6dc641a4a50a4baf1d4c
- MD5 a27716523b819aa878b89c7ebf55ac5a
- SHA1 e0582bc3efc8724f8c415944946a8585ea563256
- SHA512 71492aae53dc4b0b410f80532867f79a073915d8ef8f002993c365c966c1f4d7599d4e37767af7b26da332435888de1b0698cd113dc9fd430d091e76944a3264
- SSDEEP 6144:b6eCupTwZA/CNDepKpo4hkuaTYOkWOZZxOFQ1oYUO5cX0:eef+vhZxzcE
- TLSH T14154B60E6E228F7DF278877447F74A31975C22D226F2D684E1ACD3141E2429E945FBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Renames itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.