Sample details: 6e83771c88158cb3cf32abc0e6c557f5 --

Hashes
MD5: 6e83771c88158cb3cf32abc0e6c557f5
SHA1: 4126fc86953aeb60ab21c74edd908ab474a50a43
SHA256: 6d99ede1cb7614338622d1ff351051cce84cb914e69f0716e2162614cce161c0
SSDEEP: 1536:ZVnsP+SiPuXJEbiaNV82/rKGpoSEpLWIxibJgwKWF9:6kPcmi2V8M3pZJgwKWF9
Details
File Type: ELF
Yara Hits
Source
http://167.99.24.159/bins/hoho.arm6
Strings
		167.99.24.159
Botnet Made By greek.Helios
0125!8 
'!$$;& 
<!: acam
g1$a#f!
'<188T
1:5681T
'-' 19T
{6=:{6!'-6;,t
nt5$$81 t:; t2;!:0T
:7;&&17 T
{6=:{6!'-6;,t$'T
{6=:{6!'-6;,t?=88tymtT
{$&;7{T
{95$'T
{$&;7{:1 { 7$T
{' 5 !'T
z5:=91T
{$&;7{:1 {&;! 1T
5''#;&0T
{1 7{&1';8"z7;:2T
:591'1&"1&tT
{01"{#5 7<0;3T
{01"{9='7{#5 7<0;3T
$662*7!E
1: 1&T
e365`70;9ag:<$ef1=d?2>T
;::17 10t
;!&71t
:3=:1t
/proc/stat
/proc/cpuinfo
processor
/sys/devices/system/cpu
/dev/null
.shstrtab
.rodata
.init_array
.fini_array
.ARM.attributes