Analysis
-
max time kernel
152s -
max time network
164s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
09/12/2024, 02:27
Behavioral task
behavioral1
Sample
7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf
Resource
debian12-mipsel-20240221-en
4 signatures
150 seconds
General
-
Target
7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf
-
Size
173KB
-
MD5
649859dbdd53afe77e8d2929d39fa7dc
-
SHA1
5328db69f349ff13775f5f9b00754f4e4ceff2b8
-
SHA256
7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe
-
SHA512
ce64f6600101ee3bd18f2bd876f6656eed88bd517d87bc03c4058c9f2257fda4439f24755e2798b5b3c52782569a7d175e0188042349e621ca43fca3c319624e
-
SSDEEP
3072:nKpzGQeNkSfcQqmav8SqaRVlnYz655Vt:nKYQeNYQqmeqavlg655
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 737 7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 737 7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf 739 7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 737 7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf 7675c1e92a3731fa3991d1f7b00665d5c4d5af5316a6c6531acba892b6fe98fe.elf