Analysis
-
max time kernel
150s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
27-11-2024 21:37
Behavioral task
behavioral1
Sample
bot.mips.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
4 signatures
150 seconds
General
-
Target
bot.mips.elf
-
Size
177KB
-
MD5
dba784f52b7372262abca621b2dcda12
-
SHA1
0ff299d2e65fe4d20b16153f249a7f3e6250d7d0
-
SHA256
76529ff2f65f4aef14a2140ec8babb941cda6b6ad0d6696f1bbc48ffa1a598f6
-
SHA512
cc6694f986cd025dc29ce98f94187f15f3095d212ce2ce46833cac2179075fcf9e9443cf4f8082d4dfb13154f62e5ef326c47936c812f5661cd6325f1f5986bd
-
SSDEEP
3072:Xaup+PqlzjRmWb/gBtQL/SrYbmFl4R44bOQy2P:Xaup+PqlvRmWbI4ilFg4eOl4
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M " 709 bot.mips.elf -
description ioc Process File opened for reading /proc/711/cmdline bot.mips.elf File opened for reading /proc/757/cmdline bot.mips.elf File opened for reading /proc/776/cmdline bot.mips.elf File opened for reading /proc/789/cmdline bot.mips.elf File opened for reading /proc/810/cmdline bot.mips.elf File opened for reading /proc/725/cmdline bot.mips.elf File opened for reading /proc/767/cmdline bot.mips.elf File opened for reading /proc/778/cmdline bot.mips.elf File opened for reading /proc/13/cmdline bot.mips.elf File opened for reading /proc/387/cmdline bot.mips.elf File opened for reading /proc/730/cmdline bot.mips.elf File opened for reading /proc/748/cmdline bot.mips.elf File opened for reading /proc/759/cmdline bot.mips.elf File opened for reading /proc/6/cmdline bot.mips.elf File opened for reading /proc/37/cmdline bot.mips.elf File opened for reading /proc/358/cmdline bot.mips.elf File opened for reading /proc/777/cmdline bot.mips.elf File opened for reading /proc/768/cmdline bot.mips.elf File opened for reading /proc/792/cmdline bot.mips.elf File opened for reading /proc/798/cmdline bot.mips.elf File opened for reading /proc/1/cmdline bot.mips.elf File opened for reading /proc/707/cmdline bot.mips.elf File opened for reading /proc/714/cmdline bot.mips.elf File opened for reading /proc/735/cmdline bot.mips.elf File opened for reading /proc/742/cmdline bot.mips.elf File opened for reading /proc/15/cmdline bot.mips.elf File opened for reading /proc/74/cmdline bot.mips.elf File opened for reading /proc/75/cmdline bot.mips.elf File opened for reading /proc/386/cmdline bot.mips.elf File opened for reading /proc/773/cmdline bot.mips.elf File opened for reading /proc/11/cmdline bot.mips.elf File opened for reading /proc/700/cmdline bot.mips.elf File opened for reading /proc/751/cmdline bot.mips.elf File opened for reading /proc/755/cmdline bot.mips.elf File opened for reading /proc/21/cmdline bot.mips.elf File opened for reading /proc/78/cmdline bot.mips.elf File opened for reading /proc/712/cmdline bot.mips.elf File opened for reading /proc/18/cmdline bot.mips.elf File opened for reading /proc/721/cmdline bot.mips.elf File opened for reading /proc/23/cmdline bot.mips.elf File opened for reading /proc/172/cmdline bot.mips.elf File opened for reading /proc/756/cmdline bot.mips.elf File opened for reading /proc/788/cmdline bot.mips.elf File opened for reading /proc/805/cmdline bot.mips.elf File opened for reading /proc/170/cmdline bot.mips.elf File opened for reading /proc/352/cmdline bot.mips.elf File opened for reading /proc/739/cmdline bot.mips.elf File opened for reading /proc/769/cmdline bot.mips.elf File opened for reading /proc/770/cmdline bot.mips.elf File opened for reading /proc/723/cmdline bot.mips.elf File opened for reading /proc/726/cmdline bot.mips.elf File opened for reading /proc/740/cmdline bot.mips.elf File opened for reading /proc/22/cmdline bot.mips.elf File opened for reading /proc/24/cmdline bot.mips.elf File opened for reading /proc/73/cmdline bot.mips.elf File opened for reading /proc/81/cmdline bot.mips.elf File opened for reading /proc/705/cmdline bot.mips.elf File opened for reading /proc/750/cmdline bot.mips.elf File opened for reading /proc/771/cmdline bot.mips.elf File opened for reading /proc/815/cmdline bot.mips.elf File opened for reading /proc/758/cmdline bot.mips.elf File opened for reading /proc/775/cmdline bot.mips.elf File opened for reading /proc/796/cmdline bot.mips.elf File opened for reading /proc/7/cmdline bot.mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 709 bot.mips.elf