Analysis
-
max time kernel
141s -
max time network
141s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231222-en -
resource tags
arch:mipselimage:debian9-mipsel-20231222-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
04/01/2024, 11:56
Static task
static1
Behavioral task
behavioral1
Sample
40cb7d81e487c87a96c09c0c8830686c
Resource
debian9-mipsel-20231222-en
3 signatures
150 seconds
General
-
Target
40cb7d81e487c87a96c09c0c8830686c
-
Size
84KB
-
MD5
40cb7d81e487c87a96c09c0c8830686c
-
SHA1
92a3fa0cf5c4578e96e426425f3bcf04cc1f1182
-
SHA256
edf078c2a68a6193a20abffa0f61f4e70aea5932fae1c4e9d699ee97e9afb461
-
SHA512
4977b415fe6989369477d8ba72d311a23184f04c9290ab839bb77624a36735ea1e8b82d97d025694545da9a756ca54cf416011c252c20d967ff83b0ec6892d3b
-
SSDEEP
1536:teTRXEOw27Ey2JcilmZX2pEi0w2sGljrvwv6FPNjCwbkFb:GX3ajYvrsGljr4v6FPNjCUkFb
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Changes the process name, possibly in an attempt to hide itself 718 -
Deletes itself 1 IoCs
pid 718 -
Reads runtime system information 31 IoCs
Reads data from /proc virtual filesystem.
description ioc File opened for reading /proc/423 File opened for reading /proc/424 File opened for reading /proc/427/maps File opened for reading /proc/402 File opened for reading /proc/405 File opened for reading /proc/407 File opened for reading /proc/414 File opened for reading /proc/418 File opened for reading /proc/422 File opened for reading /proc/403 File opened for reading /proc/413 File opened for reading /proc/426 File opened for reading /proc/752/exe File opened for reading /proc/406 File opened for reading /proc/419 File opened for reading /proc/427 File opened for reading /proc/401 File opened for reading /proc/404 File opened for reading /proc/409 File opened for reading /proc/411 File opened for reading /proc/415 File opened for reading /proc/425 File opened for reading /proc/427/exe File opened for reading /proc/410 File opened for reading /proc/412 File opened for reading /proc/417 File opened for reading /proc/400 File opened for reading /proc/408 File opened for reading /proc/416 File opened for reading /proc/421 File opened for reading /proc/420