Overview

overview

10

Static

static

10

i

debian-9-mips

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    i
  • Size 300KB
  • Sample261113-pdrfasvt4k
  • SHA256 21714f89a31bc7265ab0b0efef9aad6aa8409257978c43d28524c72e9bfe9772
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
upxbotnetmozi

Malware Config

Signatures

  • Family: Mozi, Mozi Botnet

    Mozi aka MoziBotnet is a multi-platform linux botnet targeting IoT devices.

    botnetmozi
  • Detects Mozi Payload 1 IoCs
  • Patched UPX-packed file 1 IoCs

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx

File Explorer

  • i
    .elf 300KB

i

  • SHA256 21714f89a31bc7265ab0b0efef9aad6aa8409257978c43d28524c72e9bfe9772
  • MD5 SHA1 SHA512 SSDEEP TLSH
linuxmipsbe

  • Detects Mozi Payload

  • Patched UPX-packed file

    Sample is packed with UPX but required header fields are zeroed out to prevent unpacking with the default UPX tool.

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx