Analysis
-
max time kernel
152s -
max time network
157s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
-
submitted
09/04/2024, 01:03
General
-
Target
1084de2c6b276091fb6bb724ebd0db0def1f47c4f85eb0704a494b6149961bed.elf
-
Size
62KB
-
MD5
35ef78b937ca3f4657077a2da1e74a9f
-
SHA1
ef11361c058991421f48764a94c2916985c89b1b
-
SHA256
1084de2c6b276091fb6bb724ebd0db0def1f47c4f85eb0704a494b6149961bed
-
SHA512
461b492cdc9b9741cccc9080fcbdb018380288aea168cea2e97fc43090f3ff286e03177ac4ae842f9465c0527ef7f301f68f65f51b9033d7e318a8f7e80f40b3
-
SSDEEP
768:Xq0PX0mnimIrBjKeHne+qeDNBkxlZszfXiowAu4I8qw:XqSX0mmu+nXq6NBkbZszBJt
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
-
Deletes itself 1 IoCs
-
Renames itself 1 IoCs
-
Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/1084de2c6b276091fb6bb724ebd0db0def1f47c4f85eb0704a494b6149961bed.elf/tmp/1084de2c6b276091fb6bb724ebd0db0def1f47c4f85eb0704a494b6149961bed.elf1⤵
- Changes its process name
- Deletes itself
- Renames itself