Analysis
-
max time kernel
150s -
max time network
152s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231215-en -
resource tags
arch:mipselimage:debian9-mipsel-20231215-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
22/12/2023, 14:24
Static task
static1
Behavioral task
behavioral1
Sample
c0255c5eb70f72c5fdcc3c111c1f4c21
Resource
debian9-mipsel-20231215-en
3 signatures
150 seconds
General
-
Target
c0255c5eb70f72c5fdcc3c111c1f4c21
-
Size
245KB
-
MD5
c0255c5eb70f72c5fdcc3c111c1f4c21
-
SHA1
7810f5905c6428caf61e1427715743da5acc10d8
-
SHA256
bff5749791072a54077ee7365b596c277e9c7e8dd4e57c9b2992f9839dd6cd8d
-
SHA512
695ece8a6ce8332d304b1e2aa63fcdc38a0d52edec74d8d9ed7e43167a964341ace319a8a5867f9f2e75694abae7d927df1bf196c87caeac47cafb71ac2549da
-
SSDEEP
6144:cffQDQUaJe5kU4iw5on/XQwDmhU1LbwYtj8PuxrliB:YQDQUa4k7r5IbDmhU1LbwYtj8PuxrliB
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself [cpuset] 723 c0255c5eb70f72c5fdcc3c111c1f4c21 -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route c0255c5eb70f72c5fdcc3c111c1f4c21 -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route c0255c5eb70f72c5fdcc3c111c1f4c21