roze.armv4
First submission 2024-10-17 16:00:02
File details
File type: | ELF 32-bit LSB executable, ARM, version 1 (ARM), statically linked, with debug_info, not stripped |
Mime type: | application/x-executable |
File size: | 167.2 KB (171215 bytes) |
MD5: | bc7b476e7bbd945b86760061091a98be |
SHA1: | e2e0dfcf01e9880ce06c24b7a78de31bbe1a40de |
SHA256: | afdb8449b5220a064ef368b764dd37d0180f3b8c958cccc41bff11bd217fe1d5 |
File features detected
Is DLL
Packers
Anti Debug
Anti VM
Signed
XOR
OSINT Enrichments
Virus Total: | 41/77 VT report date: 2024-10-17 14:31:06 |
Malware Type 1 | trojan |
Threat Type 3 | gafgyt mirai bashlite |
URLs, FQDN and IP indicators 1
Strings analysis - Possible IPs found 11
1.9.2.8 |
3.0.4.2 |
8.8.8.8 |
87.120.112.102 |
1.9.2.6 |
1.9.2.4 |
1.8.1.11 |
1.9.0.8 |
1.9.1.3 |
1.9.1.1 |
1.9.0.6 |
Strings analysis - Possible URLs found 5
http://www.baidu.com/search/spider.html) |
http://www.baidu.com/search/spider.htm) |
http://www.billybobbot.com/crawler/) |
http://fast.no/support/crawler.asp) |
http://feedback.redkolibri.com/ |