Analysis
-
max time kernel
148s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240226-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
17-04-2024 15:33
Behavioral task
behavioral1
Sample
0ec2e5deabf9751adbfe71c34c576162.elf
Resource
debian9-mipsbe-20240226-en
debian-9-mips
3 signatures
150 seconds
General
-
Target
0ec2e5deabf9751adbfe71c34c576162.elf
-
Size
183KB
-
MD5
0ec2e5deabf9751adbfe71c34c576162
-
SHA1
e6f582614d529b3d52d672d47d5bebeca16c5a3e
-
SHA256
9c7f1fd869cf1ab94b4f2e55f3626293de4fd52dcbd52b04b3075e01cc76c28d
-
SHA512
c34764db320c63bec1ea2449709ba48c7c9131bbf41ecfbde2be42e933bde1dc55c0e0850b5130d5bb3491f88d9c8243bfe2948081c2095934e20ba8fffadf13
-
SSDEEP
3072:zAfnKPGD1aiaI0Jc+etJ8add9QzhsIPLpdfi+8qLw/i+L9k:yKOD17ELetJ8addQVFdfi+8qLwa+L9k
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description pid Process Changes the process name, possibly in an attempt to hide itself 707 0ec2e5deabf9751adbfe71c34c576162.elf -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route 0ec2e5deabf9751adbfe71c34c576162.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route 0ec2e5deabf9751adbfe71c34c576162.elf