Extracted

• • Target
    FGx8SNCa4txePA.mips.elf
  • Size 82KB
  • SHA256 b7e11c992a623d6f526d24a859150f8b4aeb2be21a352c8e3324d6d799bc2234
  • MD5 9ff4409e916b5f855595904076cb56ae
  • SHA1 31f97626d2527ce103e43124d39c94496ceaacd3
  • SHA512 f96dc960672718f47552f17479324cbfe2a5273989b175bc258637b0e018e50b95b7886db0d0cb10e796011d1dd95b3711735f69108bd313175853c430e7632a
  • SSDEEP 1536:lv1ZlKmxtBidTspK83i2HSOUWiaVeAxrYQ:5Jxthp1i2yOUWiazrYQ
  • TLSH
    T15483D81E7E218FBDFAE9863447B78E16A65833CA37E1D585D16CD6002E6024E341FFA4
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  7^/10

  command_and_controldefense_evasiondiscovery

  • Modifies Watchdog functionality

    Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.

    defense_evasion

  • Outbound SSH connection to public host

    SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.

    command_and_control

  • Writes file to system bin folder

  behavioral1