Analysis
- max time kernel
0s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
13/11/2026, 18:15
General
- Target bin.sh
- Size 132KB
- Sample261113-wwdeqaex2t
- SHA256 4293c1d8574dc87c58360d6bac3daa182f64f7785c9d41da5e0741d2b1817fc7
- MD5 59ce0baba11893f90527fc951ac69912
- SHA1 5857a7dd621c4c3ebb0b5a3bec915d409f70d39f
- SHA512 c5b12797b477e5e5964a78766bb40b1c0d9fdfb8eef1f9aee3df451e3441a40c61d325bf400ba51048811b68e1c70a95f15e4166b7a65a4eca0c624864328647
- SSDEEP 3072:phNlHuBafLeBtfCzpta8xlBIOdVo3/4sxLJ10xioP:p3lOYoaja8xzx/0wsxzSi2
- TLSH T1E5D3128BEF36DC1ECF001EB226DA5B9E9C6D756B41CBF0A4B9C1818F13A01C97D52215
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Detects Mozi Payload 1 IoCs
resource yara_rule behavioral1/memory/726-1-0x00400000-0x004c2fd8-memory.dmp family_mozi -
description ioc Process File opened for reading /proc/self/exe bin.sh