DigitalSide Threat Intel

jasht.mips

First submission 2024-09-01 15:20:02 Last sumbission 2024-09-04 09:20:02

File details

File type: ELF 32-bit MSB executable, MIPS, MIPS-I version 1 (SYSV), statically linked, not stripped
Mime type: application/x-executable
File size: 141.06 KB (144442 bytes)
MD5: 993dd96fa66a0f138d9b3b40e20d4c66
SHA1: e3b0e0d5ce9dff1125e89519b77bbeed36374690
SHA256: 11e4084a1f302d1b70c30d81ce083a5b095c8157bf0a688784a25d54e4e7f18c

File features detected

Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR

OSINT Enrichments

Virus Total: 44/78 VT report date: 2024-08-23 11:10:12
Malware Type 1 trojan
Threat Type 3 gafgyt mirai ddos

URLs, FQDN and IP indicators 2

URL Host (FQDN/IP) Date Added
hXXp://154.216.17.215/jasht.mips VirusTotal Report 154.216.17.215 VirusTotal Report 2024-09-04 09:20:04
hXXp://154.216.17.173/jasht.mips VirusTotal Report 154.216.17.173 VirusTotal Report 2024-09-01 15:20:02

Strings analysis - Possible IPs found 7

1.9.2.8
3.0.4.2
1.9.0.8
154.216.18.202
8.8.4.4
1.9.1.1
1.9.1.3

Strings analysis - Possible URLs found 5

http://www.baidu.com/search/spider.html)
http://www.baidu.com/search/spider.htm)
http://www.billybobbot.com/crawler/)
http://fast.no/support/crawler.asp)
http://feedback.redkolibri.com/