FBI.mips

First submission 2024-10-14 12:39:02

File details

File type: ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, stripped
Mime type: application/x-executable
File size: 155.48 KB (159212 bytes)
MD5: 5da90f9726dce23b9b0bd7d517684111
SHA1: 789840f5b505f714f9b47701b00e23f9a0ca6bf8
SHA256: 0518f1caceb945a7032876f1b95a96c9e1f6a7a27ab34baef8b655ff2237faa1

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

OSINT Enrichments

Virus Total: 40/77 VT report date: 2024-10-14 08:02:12
Malware Type 1 trojan
Threat Type 3 gafgyt mirai genericrxtw

URLs, FQDN and IP indicators 1

URL Host (FQDN/IP) Date Added
hXXp://95.169.203.171/FBI.mips VirusTotal Report 95.169.203.171 VirusTotal Report 2024-10-14 12:39:02

Strings analysis - Possible IPs found 8

1.9.2.8
3.0.4.2
1.9.1.1
1.9.0.8
8.8.4.4
45.81.39.172
8.8.8.8
1.9.1.3

Strings analysis - Possible URLs found 5

http://www.baidu.com/search/spider.html)
http://www.baidu.com/search/spider.htm)
http://www.billybobbot.com/crawler/)
http://fast.no/support/crawler.asp)
http://feedback.redkolibri.com/