Analysis
-
max time kernel
150s -
max time network
149s -
platform
debian-9_mips -
resource
debian9-mipsbe-20221125-en -
resource tags
arch:mipsimage:debian9-mipsbe-20221125-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
01/08/2023, 13:13
Static task
static1
Behavioral task
behavioral1
Sample
cundi.mips
Resource
debian9-mipsbe-20221125-en
debian-9-mips
3 signatures
150 seconds
General
-
Target
cundi.mips
-
Size
157KB
-
MD5
b0dc2a1d27e0fbbfcd0dc74f3faa109f
-
SHA1
03a470784ab3147cc01ecce9d9be28b9fae409d1
-
SHA256
6aaee1be8cc4963b365ff3dc6f30f1fc24b0434ffd816e134fa02f0a1be39e80
-
SHA512
8104bd68c62e7bc66051e5b6584858bb2bc592d661951b5a809fbcc4ff0663a29c2e811598c99a6470f752dbb581db4cd7361aedee107b14a76b6d6f3fb32877
-
SSDEEP
1536:9MHV0dA9edSAZTZtZdNKGd7sUeN8IlPBjmTfNYoDFQT7GvQqQK:9M6JhZtvNK+7sR8IfMYo5QTKvQqQK
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 326 cundi.mips -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc File opened for reading /proc/2/cmdline File opened for reading /proc/21/cmdline File opened for reading /proc/24/cmdline File opened for reading /proc/363/cmdline File opened for reading /proc/19/cmdline File opened for reading /proc/293/cmdline File opened for reading /proc/5/cmdline File opened for reading /proc/14/cmdline File opened for reading /proc/20/cmdline File opened for reading /proc/72/cmdline File opened for reading /proc/332/cmdline File opened for reading /proc/337/cmdline File opened for reading /proc/351/cmdline File opened for reading /proc/364/cmdline File opened for reading /proc/365/cmdline File opened for reading /proc/372/cmdline File opened for reading /proc/251/cmdline File opened for reading /proc/335/cmdline File opened for reading /proc/9/cmdline File opened for reading /proc/36/cmdline File opened for reading /proc/255/cmdline File opened for reading /proc/305/cmdline File opened for reading /proc/354/cmdline File opened for reading /proc/17/cmdline File opened for reading /proc/344/cmdline File opened for reading /proc/353/cmdline File opened for reading /proc/116/cmdline File opened for reading /proc/361/cmdline File opened for reading /proc/15/cmdline File opened for reading /proc/106/cmdline File opened for reading /proc/287/cmdline File opened for reading /proc/368/cmdline File opened for reading /proc/340/cmdline File opened for reading /proc/348/cmdline File opened for reading /proc/4/cmdline File opened for reading /proc/322/cmdline File opened for reading /proc/343/cmdline File opened for reading /proc/371/cmdline File opened for reading /proc/373/cmdline File opened for reading /proc/12/cmdline File opened for reading /proc/218/cmdline File opened for reading /proc/349/cmdline File opened for reading /proc/18/cmdline File opened for reading /proc/329/cmdline File opened for reading /proc/22/cmdline File opened for reading /proc/82/cmdline File opened for reading /proc/146/cmdline File opened for reading /proc/217/cmdline File opened for reading /proc/347/cmdline File opened for reading /proc/370/cmdline File opened for reading /proc/3/cmdline File opened for reading /proc/8/cmdline File opened for reading /proc/11/cmdline File opened for reading /proc/81/cmdline File opened for reading /proc/345/cmdline File opened for reading /proc/375/cmdline File opened for reading /proc/303/cmdline File opened for reading /proc/362/cmdline File opened for reading /proc/23/cmdline File opened for reading /proc/339/cmdline File opened for reading /proc/342/cmdline File opened for reading /proc/357/cmdline File opened for reading /proc/10/cmdline File opened for reading /proc/208/cmdline