Analysis
-
max time kernel
150s -
max time network
153s -
platform
debian-9_mips -
resource
debian9-mipsbe-20231215-en -
resource tags
arch:mipsimage:debian9-mipsbe-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
19-12-2023 22:34
Behavioral task
behavioral1
Sample
146e9fcb6c9643a440a817edb0e15932
Resource
debian9-mipsbe-20231215-en
debian-9-mips
3 signatures
150 seconds
General
-
Target
146e9fcb6c9643a440a817edb0e15932
-
Size
203KB
-
MD5
146e9fcb6c9643a440a817edb0e15932
-
SHA1
cf77c3d267e1aec0e91124c82a6769f1b54ded65
-
SHA256
2b91214062dfcb01c55e034c5001304c1b4b85e9c9a128d97c9f23dcead8d412
-
SHA512
ee8fffc8915c2758668b8a95961f01da63fd75bea6af5b400c10b40f4cd45ebd3154f655451ed974a03f77e8d8130cbf7cafea34fcae49caed6e00685fb039c4
-
SSDEEP
3072:9FNQgm+tjhMElms3ttPmbZ2FrdpmhmsPP4Rp:LNYAtFmbZUzmhmsPP4Rp
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself sshd 711 146e9fcb6c9643a440a817edb0e15932 -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 146e9fcb6c9643a440a817edb0e15932 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 146e9fcb6c9643a440a817edb0e15932