Analysis
-
max time kernel
141s -
max time network
152s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240226-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
08/03/2024, 10:48
Static task
static1
Behavioral task
behavioral1
Sample
bb123a42b3da3ceffe0d4e8fb1aab2e7
Resource
debian9-mipsbe-20240226-en
2 signatures
150 seconds
General
-
Target
bb123a42b3da3ceffe0d4e8fb1aab2e7
-
Size
43KB
-
MD5
bb123a42b3da3ceffe0d4e8fb1aab2e7
-
SHA1
7154ecae3e8f055a1df7d9bdd26d64a33a2611d8
-
SHA256
9639c0f3b72c5a6f97eff539a42a808416f1ff3f34e4746990ed623468c1ab3b
-
SHA512
41cc4a950aa2a6c91f23bf9951d7a754775af8d31b2ae539114e6e5eb4f868381ec3f35c139e1e41578ebac791a0d07910e32a93ec48990fbcfb0e207139ac68
-
SSDEEP
768:SXXP3RfrwASvd/gKAI4pOy00mvArslvtp8ZD5QhkGmkJgGlzDpxYsY05iwZftS4d:wf3RDlO4KAIiljmvA4lvtYKhkGNVrYaN
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 700 bb123a42b3da3ceffe0d4e8fb1aab2e7 -
Reads runtime system information 9 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/404/exe Process not Found File opened for reading /proc/self/exe bb123a42b3da3ceffe0d4e8fb1aab2e7 File opened for reading /proc/701/exe Process not Found File opened for reading /proc/401 Process not Found File opened for reading /proc/402 Process not Found File opened for reading /proc/404 Process not Found File opened for reading /proc/400 Process not Found File opened for reading /proc/403 Process not Found File opened for reading /proc/404/maps Process not Found