Analysis
-
max time kernel
150s -
max time network
155s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
01-08-2024 20:58
Static task
static1
Behavioral task
behavioral1
Sample
mips.crdownload
Resource
debian9-mipsbe-20240611-en
debian-9-mips
6 signatures
150 seconds
General
-
Target
mips.crdownload
-
Size
77KB
-
MD5
d307ab26126edf7d1bb1797353f63ad8
-
SHA1
ab737168df696d2894136981cf9a091546f93614
-
SHA256
330eba4b63b5b7a109ebbb193195eba225eceda35db4a18f13f56b69af8beaa9
-
SHA512
54a064af0a44567527b00faebfeaaca7fa667199038263afad5a76f7eea8dc295b377f662f6bd6d4f1d20e1c13ca64d8ba2bb0736954c61f0685d6a6e1b8db52
-
SSDEEP
1536:GR0EuDEkMWrPlmhQ3tEto3k84V6z6vVz2w1bVyZlrkwzS2MynB:DWKrTu2MOB
Score
9/10
Malware Config
Signatures
-
Contacts a large (22870) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Deletes itself 1 IoCs
pid 715 -
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Changes the process name, possibly in an attempt to hide itself 715 -
Reads runtime system information 64 IoCs
Reads data from /proc virtual filesystem.
description ioc Process File opened for reading /proc/73/exe mips.crdownload File opened for reading /proc/76/maps mips.crdownload File opened for reading /proc/115/maps mips.crdownload File opened for reading /proc/115/exe mips.crdownload File opened for reading /proc/398/maps mips.crdownload File opened for reading /proc/712/maps mips.crdownload File opened for reading /proc/9/exe mips.crdownload File opened for reading /proc/709/maps mips.crdownload File opened for reading /proc/715/exe mips.crdownload File opened for reading /proc/77/maps mips.crdownload File opened for reading /proc/521/maps mips.crdownload File opened for reading /proc/712/exe mips.crdownload File opened for reading /proc/37/exe mips.crdownload File opened for reading /proc/13/exe mips.crdownload File opened for reading /proc/14/maps mips.crdownload File opened for reading /proc/20/exe mips.crdownload File opened for reading /proc/721/exe mips.crdownload File opened for reading /proc/3/exe mips.crdownload File opened for reading /proc/692/maps mips.crdownload File opened for reading /proc/114/exe mips.crdownload File opened for reading /proc/383/maps mips.crdownload File opened for reading /proc/7/maps mips.crdownload File opened for reading /proc/104/exe mips.crdownload File opened for reading /proc/150/maps mips.crdownload File opened for reading /proc/717/maps mips.crdownload File opened for reading /proc/19/maps mips.crdownload File opened for reading /proc/22/exe mips.crdownload File opened for reading /proc/71/maps mips.crdownload File opened for reading /proc/373/maps mips.crdownload File opened for reading /proc/13/maps mips.crdownload File opened for reading /proc/10/maps mips.crdownload File opened for reading /proc/72/exe mips.crdownload File opened for reading /proc/78/maps mips.crdownload File opened for reading /proc/82/exe mips.crdownload File opened for reading /proc/715/maps mips.crdownload File opened for reading /proc/1/maps mips.crdownload File opened for reading /proc/19/exe mips.crdownload File opened for reading /proc/21/maps mips.crdownload File opened for reading /proc/314/maps mips.crdownload File opened for reading /proc/8/maps mips.crdownload File opened for reading /proc/6/exe mips.crdownload File opened for reading /proc/104/maps mips.crdownload File opened for reading /proc/707/maps mips.crdownload File opened for reading /proc/2/exe mips.crdownload File opened for reading /proc/24/exe mips.crdownload File opened for reading /proc/36/maps mips.crdownload File opened for reading /proc/18/maps mips.crdownload File opened for reading /proc/17/maps mips.crdownload File opened for reading /proc/21/exe mips.crdownload File opened for reading /proc/8/exe mips.crdownload File opened for reading /proc/20/maps mips.crdownload File opened for reading /proc/23/exe mips.crdownload File opened for reading /proc/485/maps mips.crdownload File opened for reading /proc/2/maps mips.crdownload File opened for reading /proc/11/maps mips.crdownload File opened for reading /proc/6/maps mips.crdownload File opened for reading /proc/471/maps mips.crdownload File opened for reading /proc/713/maps mips.crdownload File opened for reading /proc/716/maps mips.crdownload File opened for reading /proc/719/maps mips.crdownload File opened for reading /proc/10/exe mips.crdownload File opened for reading /proc/72/maps mips.crdownload File opened for reading /proc/15/maps mips.crdownload File opened for reading /proc/24/maps mips.crdownload