Overview

overview

10

Static

static

10

35812a2546...fa.elf

debian-9-mipsel

9

Analysis

  • max time kernel
    96s
  • max time network
    153s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20240611-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    06-07-2024 14:07

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    35812a25464519911cb11ffd65ab66fa.elf

  • Size

    197KB

  • MD5

    35812a25464519911cb11ffd65ab66fa

  • SHA1

    62e977d27b4957189df2fdd998a6c12a360bd740

  • SHA256

    3c68788ddf6aae2c2a4cbdaa219e264aaada35d10a0edd21a13972d49aa12329

  • SHA512

    967045517e6df6ea01b65f45c168e12db23fedcface108a095e2403aeded5899a7221b65f09444af1e3ec755482e76456267c9702e07ae11c0038a83037f50d5

  • SSDEEP

    3072:+Ghqh0S39eye3IRqhgjUo5p9Chw2l7oLcsKGz:+Go0Ss3bhgjUmp9gx7oQB

Score
9/10
discovery

Malware Config

Signatures

  • Contacts a large (47966) amount of remote hosts 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Creates a large amount of network flows 1 TTPs

    This may indicate a network scan to discover remotely running services.

    discovery
  • Enumerates running processes

    Discovers information about currently running processes on the system

  • Changes its process name 1 IoCs
  • Reads runtime system information 64 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/35812a25464519911cb11ffd65ab66fa.elf
    /tmp/35812a25464519911cb11ffd65ab66fa.elf
    1⤵
    • Changes its process name
    • Reads runtime system information
    PID:696

Network

MITRE ATT&CK Matrix ATT&CK v13

Replay Monitor

Loading Replay Monitor...

Downloads