Analysis
-
max time kernel
150s -
max time network
151s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
08-12-2024 02:51
Behavioral task
behavioral1
Sample
de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
3 signatures
150 seconds
General
-
Target
de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf
-
Size
177KB
-
MD5
4ad148703b46bdb76791128c01180e52
-
SHA1
be40b4e7d1c2b38d48252ac886573824a051731a
-
SHA256
de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35
-
SHA512
ec0c151ff89381515c99108da9e85d61a2092ac06c75c778fede6deeb86b8e2fd5fcb306502ea5e6d88e56c5166c19ebc8d8ec9bbe429053e17fa68cc69aeac5
-
SSDEEP
3072:v6uSXvJnzjP0jW0zpyi579Yxy52tIen9A6qewZQ90n8:v6uSXvJnvP060z4igAEnfqnZ+08
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M " 707 de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf -
description ioc Process File opened for reading /proc/721/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/744/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/751/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/761/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/727/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/754/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/772/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/2/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/77/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/154/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/723/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/724/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/779/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/810/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/735/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/757/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/324/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/737/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/742/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/752/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/783/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/756/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/766/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/794/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/11/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/21/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/37/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/354/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/747/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/811/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/72/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/750/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/762/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/807/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/18/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/714/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/725/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/775/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/797/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/709/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/743/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/809/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/320/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/672/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/711/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/13/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/17/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/20/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/22/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/24/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/746/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/776/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/790/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/4/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/323/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/356/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/720/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/792/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/78/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/702/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/765/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/771/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/69/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf File opened for reading /proc/676/cmdline de3f739303636fe0c66b19b7b1e4c177397a789a2a646e73a86b303d5ac65b35.elf