General
- Target pmips.elf
- Size 239KB
- Sample261003-lc5praw1cx
- SHA256 144d36ce2d4364985022df9dc8de68accbc5269a819d3af57c3100dc69fcdc5a
- MD5 3bddb4cf63148e1f2f8efb10c06c233d
- SHA1 19792c81699b1fe37657f1fd3fb24db4af8f2456
- SHA512 447beb035f439b305c96f3203cf06a04301453e03f6159e94fe4b32c503015e5bbfa1995160b05253d84d788e311e1b5b65a6da78430cb7d38ba91715065e325
- SSDEEP 3072:I2wfxic4OoGQImGJ/MXXVzvtTJtYhI9lERogVFz:I2wf8XBGZKxFVtV9lEdFz
- TLSH T1F534C71F6E228F6DF269CB7447F74D35976923D726E1D680D2ACC2101E6038E641FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
pmips.elf
Resource
debian9-mipsbe-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target pmips.elf
- Size 239KB
- SHA256 144d36ce2d4364985022df9dc8de68accbc5269a819d3af57c3100dc69fcdc5a
- MD5 3bddb4cf63148e1f2f8efb10c06c233d
- SHA1 19792c81699b1fe37657f1fd3fb24db4af8f2456
- SHA512 447beb035f439b305c96f3203cf06a04301453e03f6159e94fe4b32c503015e5bbfa1995160b05253d84d788e311e1b5b65a6da78430cb7d38ba91715065e325
- SSDEEP 3072:I2wfxic4OoGQImGJ/MXXVzvtTJtYhI9lERogVFz:I2wf8XBGZKxFVtV9lEdFz
- TLSH T1F534C71F6E228F6DF269CB7447F74D35976923D726E1D680D2ACC2101E6038E641FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Modifies Watchdog functionality
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.