General
- Target iranbot-ultimate.mipsel.elf
- Size 215KB
- Sample261031-ryw8dsxxbx
- SHA256 0b48c4623e235493a4c9d504e85db52f2e2d52bcb57dbda69bc9d235619aa0ed
- MD5 d4af68c702dab0b09811cdd6f0fa10d7
- SHA1 c2381f56bfc351ed744263969b3d023896d583e7
- SHA512 f0bcce1cd6453fdd8f908dcf7579d7a32f27dd754271a997ab089039319681974ec3888ed6e66e16f28ec798398cd0b6fe85f4c409c47d9a3e55c4e9b0d519c3
- SSDEEP 6144:FO7QCOXBRYmPcBMbcsKDrrjXOqYOE0vgz3zWkWUY:FCQRnUBMgC0uY
- TLSH T10D2409069F510FBBC86FDE3302E90A1239CCA95726653B757274E924F64E58B09E3C78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
iranbot-ultimate.mipsel.elf
Resource
debian12-mipsel-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target iranbot-ultimate.mipsel.elf
- Size 215KB
- SHA256 0b48c4623e235493a4c9d504e85db52f2e2d52bcb57dbda69bc9d235619aa0ed
- MD5 d4af68c702dab0b09811cdd6f0fa10d7
- SHA1 c2381f56bfc351ed744263969b3d023896d583e7
- SHA512 f0bcce1cd6453fdd8f908dcf7579d7a32f27dd754271a997ab089039319681974ec3888ed6e66e16f28ec798398cd0b6fe85f4c409c47d9a3e55c4e9b0d519c3
- SSDEEP 6144:FO7QCOXBRYmPcBMbcsKDrrjXOqYOE0vgz3zWkWUY:FCQRnUBMgC0uY
- TLSH T10D2409069F510FBBC86FDE3302E90A1239CCA95726653B757274E924F64E58B09E3C78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Traces itself
Traces itself to prevent debugging attempts
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.