Analysis
-
max time kernel
150s -
max time network
155s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
19/04/2024, 12:00
Behavioral task
behavioral1
Sample
136415a68341ba2706982ecd53af6531d5fe2bead73f5f6c42cd66f08a28327a.elf
Resource
debian12-mipsel-20240221-en
3 signatures
150 seconds
General
-
Target
136415a68341ba2706982ecd53af6531d5fe2bead73f5f6c42cd66f08a28327a.elf
-
Size
173KB
-
MD5
4060d4b7321a31242757a9e10a5ca477
-
SHA1
a7c6b9af470151804da1f84b3ac4fc401928e03c
-
SHA256
136415a68341ba2706982ecd53af6531d5fe2bead73f5f6c42cd66f08a28327a
-
SHA512
5f4787a244638300042891f6c10c958ce92a279991ba501bf5eba6dc6a8978d2ec2898f8a2c8edf37b4d69427725fbab9417342245bc69ddc2e7fe176dc13f2f
-
SSDEEP
3072:OeEksFM+wXnVaVB8H3NaMsTD+4pBU9k+r9KH/T:OeEnO+wXgVGdaMKDFpSi+8f
Score
7/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M"! 719 136415a68341ba2706982ecd53af6531d5fe2bead73f5f6c42cd66f08a28327a.elf -
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc File opened for reading /proc/380/cmdline File opened for reading /proc/785/cmdline File opened for reading /proc/746/cmdline File opened for reading /proc/747/cmdline File opened for reading /proc/786/cmdline File opened for reading /proc/740/cmdline File opened for reading /proc/11/cmdline File opened for reading /proc/20/cmdline File opened for reading /proc/31/cmdline File opened for reading /proc/118/cmdline File opened for reading /proc/694/cmdline File opened for reading /proc/710/cmdline File opened for reading /proc/726/cmdline File opened for reading /proc/748/cmdline File opened for reading /proc/763/cmdline File opened for reading /proc/775/cmdline File opened for reading /proc/15/cmdline File opened for reading /proc/16/cmdline File opened for reading /proc/116/cmdline File opened for reading /proc/749/cmdline File opened for reading /proc/757/cmdline File opened for reading /proc/8/cmdline File opened for reading /proc/9/cmdline File opened for reading /proc/14/cmdline File opened for reading /proc/48/cmdline File opened for reading /proc/736/cmdline File opened for reading /proc/13/cmdline File opened for reading /proc/33/cmdline File opened for reading /proc/750/cmdline File opened for reading /proc/22/cmdline File opened for reading /proc/711/cmdline File opened for reading /proc/737/cmdline File opened for reading /proc/29/cmdline File opened for reading /proc/37/cmdline File opened for reading /proc/390/cmdline File opened for reading /proc/691/cmdline File opened for reading /proc/762/cmdline File opened for reading /proc/396/cmdline File opened for reading /proc/720/cmdline File opened for reading /proc/772/cmdline File opened for reading /proc/776/cmdline File opened for reading /proc/137/cmdline File opened for reading /proc/744/cmdline File opened for reading /proc/2/cmdline File opened for reading /proc/112/cmdline File opened for reading /proc/181/cmdline File opened for reading /proc/754/cmdline File opened for reading /proc/666/cmdline File opened for reading /proc/688/cmdline File opened for reading /proc/725/cmdline File opened for reading /proc/743/cmdline File opened for reading /proc/781/cmdline File opened for reading /proc/17/cmdline File opened for reading /proc/731/cmdline File opened for reading /proc/732/cmdline File opened for reading /proc/727/cmdline File opened for reading /proc/742/cmdline File opened for reading /proc/21/cmdline File opened for reading /proc/27/cmdline File opened for reading /proc/733/cmdline File opened for reading /proc/779/cmdline File opened for reading /proc/7/cmdline File opened for reading /proc/28/cmdline File opened for reading /proc/53/cmdline