Sample details: b1e642d300f9e887f3f667e97b26b751 --

Hashes
MD5: b1e642d300f9e887f3f667e97b26b751
SHA1: 402acbb3daba16176206ce2d951d03875c7280db
SHA256: 30ddb6e525540791e97e6242f5e9097be6dd7ba7a53cbbcd3e5fd87f1fbe37de
SSDEEP: 1536:NVvhpdFcrqRpy7jUJy2drq88qNBj8IusUhRj:vv7dGrqr2wdZT8cBYIu7hB
Details
File Type: ELF
Yara Hits
YRP/maldoc_getEIP_method_1 | YRP/contentis_base64 | YRP/domain | FlorianRoth/Mirai_Botnet_Malware |
Strings
		D$(j@j
D$$j@j
D$(_]j
;|$(t:WWj
D$ j@j
\$H9\$
D$ j@j
< t <	t
C)QQWP
D$ JR**
f;T$`u
19D$$}@
AB;L$,t!
FA9L$(
;T$(}Q
D$$PSV
xAPPSh
\$Th@@
\$0PPj
}/C;T$
t$$hp@
u%WWSS
PPSh|4
t@;D$xu
/proc/net/tcp
/dev/watchdog
/dev/misc/watchdog
abcdefghijklmn@opqrstuvw012345678
AW@QUKL
AKPPMQ"
ZOJFKRA
FGDCWNV
HWCLVGAJ
WaNKLWZ"
QWRRMPV
RCQQUMPF
QOACFOKL
OGKLQO
cFOKLKQVPCVMP
QGPTKAG
QWRGPTKQMP
CFOKLKQVPCVMP
Q[QVGO
FPGCO@MZ
PGCNVGI
assword
KILLER: applet not found
/bin/busybox kill %d
/bin/busybox cat /proc/%d/eviron
DPGGRGKL
@KE@MVRGKL
PG@MMVKLE
uEzAs"
FGNGVGF
CLKOG"
QVCVWQ"
pgrmpv
jvvrdnmmf"
nmnlmevdm"
XMNNCPF"
egvnmacnkr"
QJGNN"
GLC@NG"
Q[QVGO"
@WQ[@MZ
CRRNGV
DMWLF"
LAMPPGAV"
@WQ[@MZ
vqMWPAG
gLEKLG
sWGP["
PGQMNT
LCOGQGPTGP
C@AFGDEJKHINOLMRSPQVWTU
@WQ[@MZ
@WQ[@MZ
iknngp"
/dev/null
.shstrtab
.rodata
.ctors
.dtors