Analysis
-
max time kernel
30s -
max time network
20s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240226-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
13-03-2024 14:52
Static task
static1
Behavioral task
behavioral1
Sample
MIPS (7)
Resource
debian9-mipsbe-20240226-en
debian-9-mips
2 signatures
30 seconds
General
-
Target
MIPS (7)
-
Size
104KB
-
MD5
4060c7406fa864d532f12c3599426570
-
SHA1
0bbd95e46d32dfcf07ce52684025448bc6e1e99e
-
SHA256
dac9f77a2439274cc3e5cf03c8eee63ec8880c4aaaab83e75a99bd003a37a385
-
SHA512
ba8bec9d0b3ea7be1910c4a0370eba883ba8f2bee0c4582876b9e63b07f610c0056b48596d6e1693ca62f74e600d6cc5538ab0044e189d5dcfb9c198e2368cdb
-
SSDEEP
1536:sN4AKq8Yi7SPNsSOXh/DkDK/Dhz6CQW6kKuQDnXlUPAe1S8OdXxnXVvDifbbcyLT:3QTHlifbwQH/au71
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/1/cmdline MIPS (7) File opened for reading /proc/17/cmdline MIPS (7) File opened for reading /proc/73/cmdline MIPS (7) File opened for reading /proc/77/cmdline MIPS (7) File opened for reading /proc/81/cmdline MIPS (7) File opened for reading /proc/160/cmdline MIPS (7) File opened for reading /proc/self/maps MIPS (7) File opened for reading /proc/37/cmdline MIPS (7) File opened for reading /proc/74/cmdline MIPS (7) File opened for reading /proc/358/cmdline MIPS (7) File opened for reading /proc/696/cmdline MIPS (7) File opened for reading /proc/712/cmdline MIPS (7) File opened for reading /proc/4/cmdline MIPS (7) File opened for reading /proc/126/cmdline MIPS (7) File opened for reading /proc/153/cmdline MIPS (7) File opened for reading /proc/361/cmdline MIPS (7) File opened for reading /proc/8/cmdline MIPS (7) File opened for reading /proc/682/cmdline MIPS (7) File opened for reading /proc/716/cmdline MIPS (7) File opened for reading /proc/717/cmdline MIPS (7) File opened for reading /proc/11/cmdline MIPS (7) File opened for reading /proc/14/cmdline MIPS (7) File opened for reading /proc/18/cmdline MIPS (7) File opened for reading /proc/76/cmdline MIPS (7) File opened for reading /proc/79/cmdline MIPS (7) File opened for reading /proc/679/cmdline MIPS (7) File opened for reading /proc/710/cmdline MIPS (7) File opened for reading /proc/391/fd MIPS (7) File opened for reading /proc/10/cmdline MIPS (7) File opened for reading /proc/13/cmdline MIPS (7) File opened for reading /proc/24/cmdline MIPS (7) File opened for reading /proc/125/cmdline MIPS (7) File opened for reading /proc/362/cmdline MIPS (7) File opened for reading /proc/430/cmdline MIPS (7) File opened for reading /proc/723/cmdline MIPS (7) File opened for reading /proc/9/cmdline MIPS (7) File opened for reading /proc/22/cmdline MIPS (7) File opened for reading /proc/16/cmdline MIPS (7) File opened for reading /proc/3/cmdline MIPS (7) File opened for reading /proc/242/cmdline MIPS (7) File opened for reading /proc/6/cmdline MIPS (7) File opened for reading /proc/15/cmdline MIPS (7) File opened for reading /proc/109/cmdline MIPS (7) File opened for reading /proc/356/cmdline MIPS (7) File opened for reading /proc/359/cmdline MIPS (7) File opened for reading /proc/715/cmdline MIPS (7) File opened for reading /proc/727/exe Process not Found File opened for reading /proc/711/fd MIPS (7) File opened for reading /proc/390/fd MIPS (7) File opened for reading /proc/7/cmdline MIPS (7) File opened for reading /proc/12/cmdline MIPS (7) File opened for reading /proc/19/cmdline MIPS (7) File opened for reading /proc/23/cmdline MIPS (7) File opened for reading /proc/72/cmdline MIPS (7) File opened for reading /proc/75/cmdline MIPS (7) File opened for reading /proc/395/cmdline MIPS (7) File opened for reading /proc/2/cmdline MIPS (7) File opened for reading /proc/71/cmdline MIPS (7) File opened for reading /proc/724/cmdline MIPS (7) File opened for reading /proc/36/cmdline MIPS (7) File opened for reading /proc/20/cmdline MIPS (7) File opened for reading /proc/21/cmdline MIPS (7) File opened for reading /proc/258/cmdline MIPS (7) File opened for reading /proc/725/cmdline MIPS (7)