General
- Target bot.mipsel.elf
- Size 1.1MB
- Sample260925-vxmt4ssbjc
- SHA256 5f9fc4ea763995bcf48ce10fb6b548cb58023ba40a5d5618883f0f2ae451a2f3
- MD5 b76412707c6d7e32acf5f72a62602a1a
- SHA1 659c81ddf850d899a4f190fe2fedff55a8ea69f0
- SHA512 eb1d9eca4bae38c4675a3d09dc026c3fc218037547b09a70fc6a9872532ddead6b36bc7d07ebcf0aad6b5471405866f75916561d7ff4b05bc6ed57588c9a888b
- SSDEEP 24576:7BVL2UCtekP9MiCWKu/LoZespTm4C+xTCnOKW8v:qUCBVUnusklMxTCnzv
- TLSH T1C2356C46EF406FEBC09FCD30492EC35721EDE8CA52C5A62971FC4A8C7A5D3194AD3698
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
bot.mipsel.elf
Resource
debian12-mipsel-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target bot.mipsel.elf
- Size 1.1MB
- SHA256 5f9fc4ea763995bcf48ce10fb6b548cb58023ba40a5d5618883f0f2ae451a2f3
- MD5 b76412707c6d7e32acf5f72a62602a1a
- SHA1 659c81ddf850d899a4f190fe2fedff55a8ea69f0
- SHA512 eb1d9eca4bae38c4675a3d09dc026c3fc218037547b09a70fc6a9872532ddead6b36bc7d07ebcf0aad6b5471405866f75916561d7ff4b05bc6ed57588c9a888b
- SSDEEP 24576:7BVL2UCtekP9MiCWKu/LoZespTm4C+xTCnOKW8v:qUCBVUnusklMxTCnzv
- TLSH T1C2356C46EF406FEBC09FCD30492EC35721EDE8CA52C5A62971FC4A8C7A5D3194AD3698
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10File and Directory Permissions Modification
Adversaries may modify file or directory permissions to evade defenses.
Checks hardware identifiers (DMI)
Checks DMI information which indicate if the system is a virtual machine.
Enumerates running processes
Discovers information about currently running processes on the system
Reads MAC address of network interface
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
MITRE ATT&CK Enterprise v16
Defense Evasion
File and Directory Permissions Modification
1Linux and Mac File and Directory Permissions Modification
1Virtualization/Sandbox Evasion
2System Checks
2