Analysis
-
max time kernel
151s -
max time network
154s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
19/11/2024, 17:58
Behavioral task
behavioral1
Sample
mmb4.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
mmb4.elf
-
Size
177KB
-
MD5
8f0d7edfcf7c290bbe7447cfd12635f4
-
SHA1
e58e5075440f88038766eaf8cd2e395a2ec8ecb4
-
SHA256
5b498bb8372b66f7e8ba5bde9e14d0b47f1c8c1d4a3ceab30b22ba3c356ca2f0
-
SHA512
d97474cd58c95fdc4494993c6afd1d8013580791274c67d3a227a8ad86085ebd56ead14260456983c1b53b1ca0be6f29c75e54f60c4a0cfa3f6d3757f7948aa6
-
SSDEEP
3072:Mwoe3sEiZt9nQiX/GpO1SMRpp6NWJdWQji:MnSspZDQiX/2ObRWoDWE
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 739 mmb4.elf -
description ioc Process File opened for reading /proc/11/cmdline mmb4.elf File opened for reading /proc/766/cmdline mmb4.elf File opened for reading /proc/770/cmdline mmb4.elf File opened for reading /proc/780/cmdline mmb4.elf File opened for reading /proc/788/cmdline mmb4.elf File opened for reading /proc/26/cmdline mmb4.elf File opened for reading /proc/346/cmdline mmb4.elf File opened for reading /proc/767/cmdline mmb4.elf File opened for reading /proc/786/cmdline mmb4.elf File opened for reading /proc/30/cmdline mmb4.elf File opened for reading /proc/116/cmdline mmb4.elf File opened for reading /proc/8/cmdline mmb4.elf File opened for reading /proc/12/cmdline mmb4.elf File opened for reading /proc/45/cmdline mmb4.elf File opened for reading /proc/119/cmdline mmb4.elf File opened for reading /proc/761/cmdline mmb4.elf File opened for reading /proc/775/cmdline mmb4.elf File opened for reading /proc/777/cmdline mmb4.elf File opened for reading /proc/22/cmdline mmb4.elf File opened for reading /proc/27/cmdline mmb4.elf File opened for reading /proc/695/cmdline mmb4.elf File opened for reading /proc/720/cmdline mmb4.elf File opened for reading /proc/769/cmdline mmb4.elf File opened for reading /proc/5/cmdline mmb4.elf File opened for reading /proc/697/cmdline mmb4.elf File opened for reading /proc/9/cmdline mmb4.elf File opened for reading /proc/713/cmdline mmb4.elf File opened for reading /proc/731/cmdline mmb4.elf File opened for reading /proc/746/cmdline mmb4.elf File opened for reading /proc/747/cmdline mmb4.elf File opened for reading /proc/10/cmdline mmb4.elf File opened for reading /proc/15/cmdline mmb4.elf File opened for reading /proc/48/cmdline mmb4.elf File opened for reading /proc/679/cmdline mmb4.elf File opened for reading /proc/53/cmdline mmb4.elf File opened for reading /proc/396/cmdline mmb4.elf File opened for reading /proc/680/cmdline mmb4.elf File opened for reading /proc/759/cmdline mmb4.elf File opened for reading /proc/7/cmdline mmb4.elf File opened for reading /proc/29/cmdline mmb4.elf File opened for reading /proc/667/cmdline mmb4.elf File opened for reading /proc/742/cmdline mmb4.elf File opened for reading /proc/24/cmdline mmb4.elf File opened for reading /proc/356/cmdline mmb4.elf File opened for reading /proc/733/cmdline mmb4.elf File opened for reading /proc/3/cmdline mmb4.elf File opened for reading /proc/32/cmdline mmb4.elf File opened for reading /proc/377/cmdline mmb4.elf File opened for reading /proc/776/cmdline mmb4.elf File opened for reading /proc/42/cmdline mmb4.elf File opened for reading /proc/111/cmdline mmb4.elf File opened for reading /proc/710/cmdline mmb4.elf File opened for reading /proc/16/cmdline mmb4.elf File opened for reading /proc/58/cmdline mmb4.elf File opened for reading /proc/730/cmdline mmb4.elf File opened for reading /proc/748/cmdline mmb4.elf File opened for reading /proc/716/cmdline mmb4.elf File opened for reading /proc/744/cmdline mmb4.elf File opened for reading /proc/762/cmdline mmb4.elf File opened for reading /proc/33/cmdline mmb4.elf File opened for reading /proc/112/cmdline mmb4.elf File opened for reading /proc/380/cmdline mmb4.elf File opened for reading /proc/765/cmdline mmb4.elf File opened for reading /proc/779/cmdline mmb4.elf