Overview
overview
10Static
static
100490e8427a...c7.elf
ubuntu-18.04-amd64
0490e8427a...c7.elf
debian-9-armhf
0490e8427a...c7.elf
debian-9-mips
0490e8427a...c7.elf
debian-9-mipsel
068428a4ac...26.exe
windows7-x64
1068428a4ac...26.exe
windows10-2004-x64
8087421ac22...94.elf
debian-9-mipsel
100c4791a6b4...ea.elf
debian-12-armhf
10d9bd2ae2e...ea.exe
windows7-x64
70d9bd2ae2e...ea.exe
windows10-2004-x64
70fa00d4f4f...70.dll
windows7-x64
10fa00d4f4f...70.dll
windows10-2004-x64
110de02fec8...d1.bat
windows7-x64
110de02fec8...d1.bat
windows10-2004-x64
81157191701...32.exe
windows7-x64
71157191701...32.exe
windows10-2004-x64
1016e81343ec...a5.exe
windows7-x64
716e81343ec...a5.exe
windows10-2004-x64
717691f0962...b7.elf
debian-12-mipsel
617c24104e8...12.exe
windows7-x64
317c24104e8...12.exe
windows10-2004-x64
31816cd993d...28.exe
windows7-x64
71816cd993d...28.exe
windows10-2004-x64
71b8cda768b...8a.elf
debian-12-armhf
11df6acbc11...b7.elf
ubuntu-18.04-amd64
1df6acbc11...b7.elf
debian-9-armhf
1df6acbc11...b7.elf
debian-9-mips
1df6acbc11...b7.elf
debian-9-mipsel
1e7706ed04...b0.elf
ubuntu-18.04-amd64
1e7706ed04...b0.elf
debian-9-armhf
1e7706ed04...b0.elf
debian-9-mips
1e7706ed04...b0.elf
debian-9-mipsel
Resubmissions
22-04-2024 22:02
240422-1xtwbagh68 1022-04-2024 19:25
240422-x42b7afa68 1019-04-2024 03:02
240419-djmthsfh8w 10Analysis
-
max time kernel
180s -
max time network
199s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
22-04-2024 22:02
Static task
static1
Behavioral task
behavioral1
Sample
0490e8427ac66951389e11dbd990c19cb1ee43102c33935b12db6a4eca7717c7.elf
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
Behavioral task
behavioral2
Sample
0490e8427ac66951389e11dbd990c19cb1ee43102c33935b12db6a4eca7717c7.elf
Resource
debian9-armhf-20240226-en
debian-9-armhf
Behavioral task
behavioral3
Sample
0490e8427ac66951389e11dbd990c19cb1ee43102c33935b12db6a4eca7717c7.elf
Resource
debian9-mipsbe-20240226-en
debian-9-mips
Behavioral task
behavioral4
Sample
0490e8427ac66951389e11dbd990c19cb1ee43102c33935b12db6a4eca7717c7.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral5
Sample
068428a4acb65807251b3b4c0aee2101519fdaebf6db5376863da5add3471f26.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral6
Sample
068428a4acb65807251b3b4c0aee2101519fdaebf6db5376863da5add3471f26.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral7
Sample
087421ac222e935579dfd3b7a5120451fd9d9a663d3d1872c04b6154b238c894.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral8
Sample
0c4791a6b47491a0c43cea0ba54357e391a3c8b23aa28025489bbe43bb9ea6ea.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
Behavioral task
behavioral9
Sample
0d9bd2ae2e4b023047b6c08684e9e5daae76e31cced4c3fdf4640136245f7eea.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral10
Sample
0d9bd2ae2e4b023047b6c08684e9e5daae76e31cced4c3fdf4640136245f7eea.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral11
Sample
0fa00d4f4f8e8449883aef7f0459a0fb754d57d55af2b41f5e445f867000fa70.dll
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral12
Sample
0fa00d4f4f8e8449883aef7f0459a0fb754d57d55af2b41f5e445f867000fa70.dll
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral13
Sample
10de02fec8ac3edbf1398e6dd43ddec95a89e0499e1e865a7d9e5289fb2b31d1.bat
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral14
Sample
10de02fec8ac3edbf1398e6dd43ddec95a89e0499e1e865a7d9e5289fb2b31d1.bat
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral15
Sample
11571917015adbf3b5196509e1082c8d415f011cce88bd8b16e9d9c5a39ac432.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral16
Sample
11571917015adbf3b5196509e1082c8d415f011cce88bd8b16e9d9c5a39ac432.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral17
Sample
16e81343ecea6082d76bf1ab26818c3bf56929c92468fae8837c6384b62d05a5.exe
Resource
win7-20231129-en
windows7-x64
Behavioral task
behavioral18
Sample
16e81343ecea6082d76bf1ab26818c3bf56929c92468fae8837c6384b62d05a5.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral19
Sample
17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
Behavioral task
behavioral20
Sample
17c24104e8e5350eeb7e2a162dec3f6a4d6c70f3f0849e6346fd383d998dcc12.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral21
Sample
17c24104e8e5350eeb7e2a162dec3f6a4d6c70f3f0849e6346fd383d998dcc12.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
Behavioral task
behavioral22
Sample
1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.exe
Resource
win7-20240221-en
windows7-x64
Behavioral task
behavioral23
Sample
1816cd993ddda970b791b090e6ecb501ef923bdcc0cc5f4a99e18dcdb7093228.exe
Resource
win10v2004-20240412-en
windows10-2004-x64
Behavioral task
behavioral24
Sample
1b8cda768ba75d723b2b0b34cf955f7ec9469b4e33c6fde6494eefd60a139d8a.elf
Resource
debian12-armhf-20240221-en
debian-12-armhf
Behavioral task
behavioral25
Sample
1df6acbc1106e17265fde3ab54b2a83fa8f6f39656d7c55481b2dbd66f1114b7.elf
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
Behavioral task
behavioral26
Sample
1df6acbc1106e17265fde3ab54b2a83fa8f6f39656d7c55481b2dbd66f1114b7.elf
Resource
debian9-armhf-20240226-en
debian-9-armhf
Behavioral task
behavioral27
Sample
1df6acbc1106e17265fde3ab54b2a83fa8f6f39656d7c55481b2dbd66f1114b7.elf
Resource
debian9-mipsbe-20240226-en
debian-9-mips
Behavioral task
behavioral28
Sample
1df6acbc1106e17265fde3ab54b2a83fa8f6f39656d7c55481b2dbd66f1114b7.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
Behavioral task
behavioral29
Sample
1e7706ed0492572474cd866f13778cc66c42b614b3d0b1d9af35727c051a50b0.elf
Resource
ubuntu1804-amd64-20240226-en
ubuntu-18.04-amd64
Behavioral task
behavioral30
Sample
1e7706ed0492572474cd866f13778cc66c42b614b3d0b1d9af35727c051a50b0.elf
Resource
debian9-armhf-20240226-en
debian-9-armhf
Behavioral task
behavioral31
Sample
1e7706ed0492572474cd866f13778cc66c42b614b3d0b1d9af35727c051a50b0.elf
Resource
debian9-mipsbe-20240226-en
debian-9-mips
Behavioral task
behavioral32
Sample
1e7706ed0492572474cd866f13778cc66c42b614b3d0b1d9af35727c051a50b0.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
General
-
Target
17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf
-
Size
177KB
-
MD5
a34eeacb65f86c57bdea56175af169ef
-
SHA1
6f474269c97412679d64187a3e99eec1707b4200
-
SHA256
17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7
-
SHA512
7e763bec443a758df9c6f322087a07cf12406a5b46ba6049ddf3fd33c780f1bbe32cd7dd7e7fb19f9a43bd4d168984de1df925c525304099e6f8cd44947da432
-
SSDEEP
3072:Mwoe3s52Zt9nQiX/GpO1SMRpp6NWJdWQwi:MnSskZDQiX/2ObRWoDWf
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
Processes:
17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elfdescription ioc pid process Changes the process name, possibly in an attempt to hide itself a- M" ! 778 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
Processes:
17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elfdescription ioc process File opened for reading /proc/16/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/118/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/713/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/714/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/786/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/10/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/11/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/14/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/30/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/109/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/136/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/676/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/777/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/18/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/22/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/26/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/58/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/201/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/373/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/427/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/717/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/15/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/25/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/44/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/53/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/179/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/695/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/697/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/779/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/781/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/24/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/33/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/108/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/110/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/391/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/679/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/719/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/28/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/47/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/8/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/9/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/23/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/34/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/6/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/1/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/27/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/31/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/113/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/5/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/21/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/220/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/368/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/785/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/42/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/3/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/17/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/19/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/48/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/365/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/718/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/787/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/4/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/29/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf File opened for reading /proc/37/cmdline 17691f0962027e7110f727ae997f8af5885dd783674d1db023d467ec478515b7.elf