Analysis
-
max time kernel
143s -
max time network
146s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19-12-2023 22:35
Static task
static1
Behavioral task
behavioral1
Sample
16b84593012a80f1f2b95190ca905f3e
Resource
debian9-mipsel-20231215-en
debian-9-mipsel
4 signatures
150 seconds
General
-
Target
16b84593012a80f1f2b95190ca905f3e
-
Size
58KB
-
MD5
16b84593012a80f1f2b95190ca905f3e
-
SHA1
8d638dc0e361ceca195b1f754e42c4ff7c3094af
-
SHA256
75a81269e9149cc1530c53bd1581e0f669f4834402cbe87782815bad4a255d07
-
SHA512
9b6833a7a01bb4160c344ddd359fcbb5d8bd2a1b53acbab36d3e2339f91fd1ca78b1bf6dde939550a48df9b4f6beab4b1b9edd3e7c1e46dd8c4cd8149f14b2c4
-
SSDEEP
768:BmYVdwCJg+tLF4WzDdfZ6Nf9Ye0v2FOTTGbw8uwDnUBhZEX/jXivb2ekekn3aXP9:BmYIYF47Kxv2FOhCU3ZEXUb2Jpn3ao
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Changes the process name, possibly in an attempt to hide itself m80i018j 713 -
Deletes itself 1 IoCs
pid Process 711 16b84593012a80f1f2b95190ca905f3e -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 711 16b84593012a80f1f2b95190ca905f3e 713 Process not Found -
Unexpected DNS network traffic destination 13 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 114.114.114.114 Destination IP 1.2.4.8 Destination IP 1.2.4.8 Destination IP 208.67.220.220 Destination IP 1.0.0.1 Destination IP 114.114.115.115 Destination IP 1.2.4.8 Destination IP 1.2.4.8 Destination IP 180.76.76.76 Destination IP 1.2.4.8 Destination IP 1.2.4.8 Destination IP 1.2.4.8 Destination IP 1.2.4.8