Analysis
-
max time kernel
150s -
max time network
136s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
07-12-2024 12:02
Behavioral task
behavioral1
Sample
bot.mips.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
4 signatures
150 seconds
General
-
Target
bot.mips.elf
-
Size
177KB
-
MD5
4ad148703b46bdb76791128c01180e52
-
SHA1
be40b4e7d1c2b38d48252ac886573824a051731a
-
SHA256
de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35
-
SHA512
ec0c151ff89381515c99108da9e85d61a2092ac06c75c778fede6deeb86b8e2fd5fcb306502ea5e6d88e56c5166c19ebc8d8ec9bbe429053e17fa68cc69aeac5
-
SSDEEP
3072:v6uSXvJnzjP0jW0zpyi579Yxy52tIen9A6qewZQ90n8:v6uSXvJnvP060z4igAEnfqnZ+08
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M " 705 bot.mips.elf -
description ioc Process File opened for reading /proc/797/cmdline bot.mips.elf File opened for reading /proc/319/cmdline bot.mips.elf File opened for reading /proc/707/cmdline bot.mips.elf File opened for reading /proc/787/cmdline bot.mips.elf File opened for reading /proc/734/cmdline bot.mips.elf File opened for reading /proc/741/cmdline bot.mips.elf File opened for reading /proc/779/cmdline bot.mips.elf File opened for reading /proc/15/cmdline bot.mips.elf File opened for reading /proc/712/cmdline bot.mips.elf File opened for reading /proc/775/cmdline bot.mips.elf File opened for reading /proc/733/cmdline bot.mips.elf File opened for reading /proc/735/cmdline bot.mips.elf File opened for reading /proc/759/cmdline bot.mips.elf File opened for reading /proc/805/cmdline bot.mips.elf File opened for reading /proc/13/cmdline bot.mips.elf File opened for reading /proc/704/cmdline bot.mips.elf File opened for reading /proc/730/cmdline bot.mips.elf File opened for reading /proc/728/cmdline bot.mips.elf File opened for reading /proc/740/cmdline bot.mips.elf File opened for reading /proc/751/cmdline bot.mips.elf File opened for reading /proc/767/cmdline bot.mips.elf File opened for reading /proc/36/cmdline bot.mips.elf File opened for reading /proc/68/cmdline bot.mips.elf File opened for reading /proc/697/cmdline bot.mips.elf File opened for reading /proc/727/cmdline bot.mips.elf File opened for reading /proc/765/cmdline bot.mips.elf File opened for reading /proc/772/cmdline bot.mips.elf File opened for reading /proc/774/cmdline bot.mips.elf File opened for reading /proc/782/cmdline bot.mips.elf File opened for reading /proc/785/cmdline bot.mips.elf File opened for reading /proc/795/cmdline bot.mips.elf File opened for reading /proc/803/cmdline bot.mips.elf File opened for reading /proc/12/cmdline bot.mips.elf File opened for reading /proc/16/cmdline bot.mips.elf File opened for reading /proc/754/cmdline bot.mips.elf File opened for reading /proc/806/cmdline bot.mips.elf File opened for reading /proc/745/cmdline bot.mips.elf File opened for reading /proc/781/cmdline bot.mips.elf File opened for reading /proc/783/cmdline bot.mips.elf File opened for reading /proc/17/cmdline bot.mips.elf File opened for reading /proc/473/cmdline bot.mips.elf File opened for reading /proc/682/cmdline bot.mips.elf File opened for reading /proc/764/cmdline bot.mips.elf File opened for reading /proc/773/cmdline bot.mips.elf File opened for reading /proc/804/cmdline bot.mips.elf File opened for reading /proc/509/cmdline bot.mips.elf File opened for reading /proc/713/cmdline bot.mips.elf File opened for reading /proc/749/cmdline bot.mips.elf File opened for reading /proc/371/cmdline bot.mips.elf File opened for reading /proc/744/cmdline bot.mips.elf File opened for reading /proc/18/cmdline bot.mips.elf File opened for reading /proc/81/cmdline bot.mips.elf File opened for reading /proc/316/cmdline bot.mips.elf File opened for reading /proc/717/cmdline bot.mips.elf File opened for reading /proc/723/cmdline bot.mips.elf File opened for reading /proc/736/cmdline bot.mips.elf File opened for reading /proc/702/cmdline bot.mips.elf File opened for reading /proc/714/cmdline bot.mips.elf File opened for reading /proc/715/cmdline bot.mips.elf File opened for reading /proc/739/cmdline bot.mips.elf File opened for reading /proc/748/cmdline bot.mips.elf File opened for reading /proc/763/cmdline bot.mips.elf File opened for reading /proc/77/cmdline bot.mips.elf File opened for reading /proc/321/cmdline bot.mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 705 bot.mips.elf