Analysis
-
max time kernel
147s -
max time network
144s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20231221-en -
resource tags
arch:mipselimage:debian9-mipsel-20231221-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
12/02/2024, 04:48
Behavioral task
behavioral1
Sample
d1cee7d6df3c780cf5462c86d91f6531169818747000df590acc34c4928bf62b.elf
Resource
debian9-mipsel-20231221-en
debian-9-mipsel
3 signatures
150 seconds
General
-
Target
d1cee7d6df3c780cf5462c86d91f6531169818747000df590acc34c4928bf62b.elf
-
Size
177KB
-
MD5
cbcf8cc200bf2977ecf4e77e42c2bec0
-
SHA1
676315f1ee05955cf58506c5a01a3857b9eb597c
-
SHA256
d1cee7d6df3c780cf5462c86d91f6531169818747000df590acc34c4928bf62b
-
SHA512
a44017c7cbd950f3a4e8b8cf74fc4ec3b882f1d628457386b38e868508dcfe432e97130dea479ecb1dff41d92e71ecab9f3b4b84c40c60793e94931b4cf514c5
-
SSDEEP
3072:Mwoe3s50Zt9nQiX/GpO1SMRpp6NWJdWQdi:MnSsmZDQiX/2ObRWoDWG
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 714 d1cee7d6df3c780cf5462c86d91f6531169818747000df590acc34c4928bf62b.elf -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc File opened for reading /proc/13/cmdline File opened for reading /proc/700/cmdline File opened for reading /proc/736/cmdline File opened for reading /proc/14/cmdline File opened for reading /proc/719/cmdline File opened for reading /proc/787/cmdline File opened for reading /proc/6/cmdline File opened for reading /proc/21/cmdline File opened for reading /proc/699/cmdline File opened for reading /proc/720/cmdline File opened for reading /proc/793/cmdline File opened for reading /proc/74/cmdline File opened for reading /proc/235/cmdline File opened for reading /proc/675/cmdline File opened for reading /proc/777/cmdline File opened for reading /proc/792/cmdline File opened for reading /proc/7/cmdline File opened for reading /proc/718/cmdline File opened for reading /proc/738/cmdline File opened for reading /proc/740/cmdline File opened for reading /proc/745/cmdline File opened for reading /proc/24/cmdline File opened for reading /proc/36/cmdline File opened for reading /proc/153/cmdline File opened for reading /proc/706/cmdline File opened for reading /proc/709/cmdline File opened for reading /proc/721/cmdline File opened for reading /proc/779/cmdline File opened for reading /proc/23/cmdline File opened for reading /proc/717/cmdline File opened for reading /proc/741/cmdline File opened for reading /proc/791/cmdline File opened for reading /proc/72/cmdline File opened for reading /proc/381/cmdline File opened for reading /proc/705/cmdline File opened for reading /proc/712/cmdline File opened for reading /proc/2/cmdline File opened for reading /proc/9/cmdline File opened for reading /proc/75/cmdline File opened for reading /proc/173/cmdline File opened for reading /proc/336/cmdline File opened for reading /proc/683/cmdline File opened for reading /proc/20/cmdline File opened for reading /proc/77/cmdline File opened for reading /proc/124/cmdline File opened for reading /proc/727/cmdline File opened for reading /proc/737/cmdline File opened for reading /proc/19/cmdline File opened for reading /proc/773/cmdline File opened for reading /proc/784/cmdline File opened for reading /proc/11/cmdline File opened for reading /proc/22/cmdline File opened for reading /proc/743/cmdline File opened for reading /proc/73/cmdline File opened for reading /proc/379/cmdline File opened for reading /proc/778/cmdline File opened for reading /proc/795/cmdline File opened for reading /proc/5/cmdline File opened for reading /proc/10/cmdline File opened for reading /proc/80/cmdline File opened for reading /proc/337/cmdline File opened for reading /proc/731/cmdline File opened for reading /proc/794/cmdline File opened for reading /proc/18/cmdline