Analysis
-
max time kernel
149s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19/04/2024, 08:44
Behavioral task
behavioral1
Sample
32b52e593ff60e22618e64ff7f6cf07c.elf
Resource
debian9-mipsel-20240226-en
3 signatures
150 seconds
General
-
Target
32b52e593ff60e22618e64ff7f6cf07c.elf
-
Size
177KB
-
MD5
32b52e593ff60e22618e64ff7f6cf07c
-
SHA1
f7fbe9677c5b2b12a32e4810dd02309f20243ccd
-
SHA256
e3755c7df53290b3a162444d1bf3219dc1949c8c967b4694513a99d06777cb4e
-
SHA512
437094727a73957164f743f967d46f5231edee6bc4fe8416c8ef7e63668451ffa51b36f514a25559ad3b1feadad7a33c854a438b5aafd1282734b6a4abb650ae
-
SSDEEP
1536:oIV+0ghYDCyCekx/705nf3g//PMSzPihLINA3RZC2ku0Zl+tkjeeCWjoz8jMUo6:oIV+0ghCCU8Y5nfz0NGRsD+oebJ8j3H
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself MC 710 32b52e593ff60e22618e64ff7f6cf07c.elf -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc File opened for reading /proc/728/cmdline File opened for reading /proc/793/cmdline File opened for reading /proc/800/cmdline File opened for reading /proc/813/cmdline File opened for reading /proc/764/cmdline File opened for reading /proc/20/cmdline File opened for reading /proc/21/cmdline File opened for reading /proc/801/cmdline File opened for reading /proc/804/cmdline File opened for reading /proc/24/cmdline File opened for reading /proc/805/cmdline File opened for reading /proc/812/cmdline File opened for reading /proc/6/cmdline File opened for reading /proc/23/cmdline File opened for reading /proc/786/cmdline File opened for reading /proc/12/cmdline File opened for reading /proc/75/cmdline File opened for reading /proc/384/cmdline File opened for reading /proc/719/cmdline File opened for reading /proc/788/cmdline File opened for reading /proc/791/cmdline File opened for reading /proc/11/cmdline File opened for reading /proc/72/cmdline File opened for reading /proc/726/cmdline File opened for reading /proc/737/cmdline File opened for reading /proc/806/cmdline File opened for reading /proc/10/cmdline File opened for reading /proc/155/cmdline File opened for reading /proc/723/cmdline File opened for reading /proc/736/cmdline File opened for reading /proc/754/cmdline File opened for reading /proc/756/cmdline File opened for reading /proc/789/cmdline File opened for reading /proc/111/cmdline File opened for reading /proc/720/cmdline File opened for reading /proc/735/cmdline File opened for reading /proc/739/cmdline File opened for reading /proc/759/cmdline File opened for reading /proc/773/cmdline File opened for reading /proc/814/cmdline File opened for reading /proc/17/cmdline File opened for reading /proc/703/cmdline File opened for reading /proc/705/cmdline File opened for reading /proc/747/cmdline File opened for reading /proc/774/cmdline File opened for reading /proc/796/cmdline File opened for reading /proc/777/cmdline File opened for reading /proc/70/cmdline File opened for reading /proc/76/cmdline File opened for reading /proc/77/cmdline File opened for reading /proc/161/cmdline File opened for reading /proc/335/cmdline File opened for reading /proc/713/cmdline File opened for reading /proc/757/cmdline File opened for reading /proc/18/cmdline File opened for reading /proc/128/cmdline File opened for reading /proc/337/cmdline File opened for reading /proc/36/cmdline File opened for reading /proc/37/cmdline File opened for reading /proc/127/cmdline File opened for reading /proc/733/cmdline File opened for reading /proc/750/cmdline File opened for reading /proc/795/cmdline File opened for reading /proc/818/cmdline