Analysis
-
max time kernel
152s -
max time network
160s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
07/12/2024, 00:32
Behavioral task
behavioral1
Sample
bot.mpsl.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
bot.mpsl.elf
-
Size
177KB
-
MD5
ff951732a18777c9133bc5b55206ba72
-
SHA1
2e90d414ad7a72743f18eeebea0086480bf42dcf
-
SHA256
179c9753bfc981d79f6a114fd7a1dcb97e2545ca7e3f24e1a3287bdff24978d2
-
SHA512
1fe8c538a9021ab55abe44c76fd31dbd3a2443808bdd522089525634b5f87da2ccfd0c02db4b71595172d61045aa80ccda1488d45596574cd7d4311b5c566366
-
SSDEEP
3072:Mwoe3s91ZtdnQiX/GpO1SMRpp6NWJdWQTx:MnSsPZjQiX/2ObRWoDW0
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M " 743 bot.mpsl.elf -
description ioc Process File opened for reading /proc/717/cmdline bot.mpsl.elf File opened for reading /proc/31/cmdline bot.mpsl.elf File opened for reading /proc/58/cmdline bot.mpsl.elf File opened for reading /proc/116/cmdline bot.mpsl.elf File opened for reading /proc/778/cmdline bot.mpsl.elf File opened for reading /proc/744/cmdline bot.mpsl.elf File opened for reading /proc/760/cmdline bot.mpsl.elf File opened for reading /proc/772/cmdline bot.mpsl.elf File opened for reading /proc/12/cmdline bot.mpsl.elf File opened for reading /proc/35/cmdline bot.mpsl.elf File opened for reading /proc/780/cmdline bot.mpsl.elf File opened for reading /proc/20/cmdline bot.mpsl.elf File opened for reading /proc/21/cmdline bot.mpsl.elf File opened for reading /proc/404/cmdline bot.mpsl.elf File opened for reading /proc/6/cmdline bot.mpsl.elf File opened for reading /proc/114/cmdline bot.mpsl.elf File opened for reading /proc/181/cmdline bot.mpsl.elf File opened for reading /proc/776/cmdline bot.mpsl.elf File opened for reading /proc/721/cmdline bot.mpsl.elf File opened for reading /proc/771/cmdline bot.mpsl.elf File opened for reading /proc/775/cmdline bot.mpsl.elf File opened for reading /proc/773/cmdline bot.mpsl.elf File opened for reading /proc/15/cmdline bot.mpsl.elf File opened for reading /proc/689/cmdline bot.mpsl.elf File opened for reading /proc/711/cmdline bot.mpsl.elf File opened for reading /proc/119/cmdline bot.mpsl.elf File opened for reading /proc/2/cmdline bot.mpsl.elf File opened for reading /proc/3/cmdline bot.mpsl.elf File opened for reading /proc/24/cmdline bot.mpsl.elf File opened for reading /proc/769/cmdline bot.mpsl.elf File opened for reading /proc/777/cmdline bot.mpsl.elf File opened for reading /proc/14/cmdline bot.mpsl.elf File opened for reading /proc/387/cmdline bot.mpsl.elf File opened for reading /proc/399/cmdline bot.mpsl.elf File opened for reading /proc/28/cmdline bot.mpsl.elf File opened for reading /proc/45/cmdline bot.mpsl.elf File opened for reading /proc/325/cmdline bot.mpsl.elf File opened for reading /proc/430/cmdline bot.mpsl.elf File opened for reading /proc/656/cmdline bot.mpsl.elf File opened for reading /proc/1/cmdline bot.mpsl.elf File opened for reading /proc/8/cmdline bot.mpsl.elf File opened for reading /proc/16/cmdline bot.mpsl.elf File opened for reading /proc/37/cmdline bot.mpsl.elf File opened for reading /proc/17/cmdline bot.mpsl.elf File opened for reading /proc/18/cmdline bot.mpsl.elf File opened for reading /proc/19/cmdline bot.mpsl.elf File opened for reading /proc/42/cmdline bot.mpsl.elf File opened for reading /proc/713/cmdline bot.mpsl.elf File opened for reading /proc/718/cmdline bot.mpsl.elf File opened for reading /proc/750/cmdline bot.mpsl.elf File opened for reading /proc/9/cmdline bot.mpsl.elf File opened for reading /proc/115/cmdline bot.mpsl.elf File opened for reading /proc/413/cmdline bot.mpsl.elf File opened for reading /proc/770/cmdline bot.mpsl.elf File opened for reading /proc/785/cmdline bot.mpsl.elf File opened for reading /proc/30/cmdline bot.mpsl.elf File opened for reading /proc/388/cmdline bot.mpsl.elf File opened for reading /proc/768/cmdline bot.mpsl.elf File opened for reading /proc/48/cmdline bot.mpsl.elf File opened for reading /proc/693/cmdline bot.mpsl.elf File opened for reading /proc/763/cmdline bot.mpsl.elf File opened for reading /proc/26/cmdline bot.mpsl.elf File opened for reading /proc/745/cmdline bot.mpsl.elf File opened for reading /proc/59/cmdline bot.mpsl.elf