top title background image
flash

Mozi.m

Status: finished
Submission Time: 2021-07-19 17:02:11 +02:00
Malicious
Spreader
Trojan
Evader
Mirai

Comments

Tags

Details

  • Analysis ID:
    450743
  • API (Web) ID:
    818332
  • Analysis Started:
    2021-07-19 17:05:52 +02:00
  • Analysis Finished:
    2021-07-19 17:11:53 +02:00
  • MD5:
    e957309c9cb381574c622b2d2a6798c0
  • SHA1:
    3589d0f624deb034ad2ac15cb1f1f0f0fde10908
  • SHA256:
    54dfe49f5b114030c318eb1be2d86bdcfac3e10d730b08631028f992fc92c9d0
  • Technologies:

Joe Sandbox

Engine Download Report Detection Info
malicious
Score: 96
System: Ubuntu Linux 16.04 x64 (Kernel 4.4.0-116, Firefox 88.0, Document Viewer 3.18.2, LibreOffice 5.1.6.2, OpenJDK 1.8.0_171)

Third Party Analysis Engines

malicious
Score: 36/60
malicious
Score: 16/37
malicious
Score: 18/27
malicious

URLs

Name Detection
http://%s:%d/Mozi.m
http://%s:%d/Mozi.m;/tmp/Mozi.m
http://%s:%d/bin.sh
Click to see the 15 hidden entries
http://%s:%d/Mozi.m;
http://%s:%d/Mozi.m;$
http://%s:%d/bin.sh;chmod
http://schemas.xmlsoap.org/soap/envelope/
http://127.0.0.1sendcmd
http://schemas.xmlsoap.org/soap/envelope//
http://baidu.com/%s/%s/%d/%s/%s/%s/%s)
http://127.0.0.1
http://%s:%d/Mozi.a;sh$
http://HTTP/1.1
http://upx.sf.net
http://purenetworks.com/HNAP1/
http://schemas.xmlsoap.org/soap/encoding/
http://%s:%d/Mozi.a;chmod
http://ipinfo.io/ip

Dropped files

Name File Type Hashes Detection
/var/crash/_usr_share_apport_apport-checkreports.1000.crash
ASCII text
#
/var/crash/_usr_share_apport_apport-gtk.1000.crash
ASCII text
#