Analysis
-
max time kernel
151s -
max time network
154s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
30-11-2024 07:27
Behavioral task
behavioral1
Sample
bot.mpsl.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
bot.mpsl.elf
-
Size
177KB
-
MD5
9e98b36448f6a913dc14deb6e05deffe
-
SHA1
0b077cea22186d514b7f8aab6e902267c7dc35c4
-
SHA256
7cb18930b8b053b1783bd130dde6b2aeed63d8b07bbb473fa38dbf8027c3adc3
-
SHA512
cec5d6434977fdd325d05ec999c98c3f763a7b51ac7c26c3b00109be86fdd98efad18e3bfc26f49a982148167334aba6e2107085cc66c899ab6954e6acf63261
-
SSDEEP
3072:swoe3s5NZ99nQiX/kepewc8ZpqNGmdWQQS:snSsPZzQiX/kueb824CWT
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M " 745 bot.mpsl.elf -
description ioc Process File opened for reading /proc/698/cmdline bot.mpsl.elf File opened for reading /proc/756/cmdline bot.mpsl.elf File opened for reading /proc/761/cmdline bot.mpsl.elf File opened for reading /proc/767/cmdline bot.mpsl.elf File opened for reading /proc/770/cmdline bot.mpsl.elf File opened for reading /proc/16/cmdline bot.mpsl.elf File opened for reading /proc/389/cmdline bot.mpsl.elf File opened for reading /proc/407/cmdline bot.mpsl.elf File opened for reading /proc/782/cmdline bot.mpsl.elf File opened for reading /proc/28/cmdline bot.mpsl.elf File opened for reading /proc/735/cmdline bot.mpsl.elf File opened for reading /proc/744/cmdline bot.mpsl.elf File opened for reading /proc/31/cmdline bot.mpsl.elf File opened for reading /proc/118/cmdline bot.mpsl.elf File opened for reading /proc/137/cmdline bot.mpsl.elf File opened for reading /proc/762/cmdline bot.mpsl.elf File opened for reading /proc/750/cmdline bot.mpsl.elf File opened for reading /proc/760/cmdline bot.mpsl.elf File opened for reading /proc/769/cmdline bot.mpsl.elf File opened for reading /proc/22/cmdline bot.mpsl.elf File opened for reading /proc/37/cmdline bot.mpsl.elf File opened for reading /proc/179/cmdline bot.mpsl.elf File opened for reading /proc/378/cmdline bot.mpsl.elf File opened for reading /proc/718/cmdline bot.mpsl.elf File opened for reading /proc/734/cmdline bot.mpsl.elf File opened for reading /proc/777/cmdline bot.mpsl.elf File opened for reading /proc/112/cmdline bot.mpsl.elf File opened for reading /proc/350/cmdline bot.mpsl.elf File opened for reading /proc/722/cmdline bot.mpsl.elf File opened for reading /proc/768/cmdline bot.mpsl.elf File opened for reading /proc/9/cmdline bot.mpsl.elf File opened for reading /proc/17/cmdline bot.mpsl.elf File opened for reading /proc/752/cmdline bot.mpsl.elf File opened for reading /proc/771/cmdline bot.mpsl.elf File opened for reading /proc/786/cmdline bot.mpsl.elf File opened for reading /proc/3/cmdline bot.mpsl.elf File opened for reading /proc/35/cmdline bot.mpsl.elf File opened for reading /proc/748/cmdline bot.mpsl.elf File opened for reading /proc/779/cmdline bot.mpsl.elf File opened for reading /proc/2/cmdline bot.mpsl.elf File opened for reading /proc/772/cmdline bot.mpsl.elf File opened for reading /proc/775/cmdline bot.mpsl.elf File opened for reading /proc/23/cmdline bot.mpsl.elf File opened for reading /proc/444/cmdline bot.mpsl.elf File opened for reading /proc/679/cmdline bot.mpsl.elf File opened for reading /proc/712/cmdline bot.mpsl.elf File opened for reading /proc/739/cmdline bot.mpsl.elf File opened for reading /proc/5/cmdline bot.mpsl.elf File opened for reading /proc/15/cmdline bot.mpsl.elf File opened for reading /proc/20/cmdline bot.mpsl.elf File opened for reading /proc/754/cmdline bot.mpsl.elf File opened for reading /proc/781/cmdline bot.mpsl.elf File opened for reading /proc/13/cmdline bot.mpsl.elf File opened for reading /proc/113/cmdline bot.mpsl.elf File opened for reading /proc/697/cmdline bot.mpsl.elf File opened for reading /proc/755/cmdline bot.mpsl.elf File opened for reading /proc/10/cmdline bot.mpsl.elf File opened for reading /proc/24/cmdline bot.mpsl.elf File opened for reading /proc/785/cmdline bot.mpsl.elf File opened for reading /proc/4/cmdline bot.mpsl.elf File opened for reading /proc/8/cmdline bot.mpsl.elf File opened for reading /proc/115/cmdline bot.mpsl.elf File opened for reading /proc/33/cmdline bot.mpsl.elf File opened for reading /proc/44/cmdline bot.mpsl.elf