Analysis
-
max time kernel
126s -
max time network
160s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
10-12-2024 17:46
Behavioral task
behavioral1
Sample
bot.mpsl.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
bot.mpsl.elf
-
Size
173KB
-
MD5
caf8a2447c982a62066426529a565438
-
SHA1
b3646144543085afe1aae92527bded161edec499
-
SHA256
e46436fad477bc6c722acc59f9a246cabc332a4d6400e69a56edac55c58c5c58
-
SHA512
555939ddc0463be6815e696b6c0d0c1b8625ed27dd37554363c5adc7d7a792e4662dc1a35b4cb94014bf187efdf46326acb341b1a7540848dc6517747258e890
-
SSDEEP
3072:ueEksFM+wX5O9aVR8H3NaMZOTTMJxt9U+7fKbuE:ueEnO+wXRVWdaMATwJHy+uy
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 743 bot.mpsl.elf -
description ioc Process File opened for reading /proc/58/cmdline bot.mpsl.elf File opened for reading /proc/17/cmdline bot.mpsl.elf File opened for reading /proc/35/cmdline bot.mpsl.elf File opened for reading /proc/853/cmdline bot.mpsl.elf File opened for reading /proc/871/cmdline bot.mpsl.elf File opened for reading /proc/873/cmdline bot.mpsl.elf File opened for reading /proc/912/cmdline bot.mpsl.elf File opened for reading /proc/714/cmdline bot.mpsl.elf File opened for reading /proc/757/cmdline bot.mpsl.elf File opened for reading /proc/23/cmdline bot.mpsl.elf File opened for reading /proc/404/cmdline bot.mpsl.elf File opened for reading /proc/119/cmdline bot.mpsl.elf File opened for reading /proc/762/cmdline bot.mpsl.elf File opened for reading /proc/22/cmdline bot.mpsl.elf File opened for reading /proc/48/cmdline bot.mpsl.elf File opened for reading /proc/861/cmdline bot.mpsl.elf File opened for reading /proc/863/cmdline bot.mpsl.elf File opened for reading /proc/906/cmdline bot.mpsl.elf File opened for reading /proc/734/cmdline bot.mpsl.elf File opened for reading /proc/822/cmdline bot.mpsl.elf File opened for reading /proc/769/cmdline bot.mpsl.elf File opened for reading /proc/812/cmdline bot.mpsl.elf File opened for reading /proc/837/cmdline bot.mpsl.elf File opened for reading /proc/11/cmdline bot.mpsl.elf File opened for reading /proc/114/cmdline bot.mpsl.elf File opened for reading /proc/882/cmdline bot.mpsl.elf File opened for reading /proc/719/cmdline bot.mpsl.elf File opened for reading /proc/787/cmdline bot.mpsl.elf File opened for reading /proc/733/cmdline bot.mpsl.elf File opened for reading /proc/749/cmdline bot.mpsl.elf File opened for reading /proc/26/cmdline bot.mpsl.elf File opened for reading /proc/383/cmdline bot.mpsl.elf File opened for reading /proc/4/cmdline bot.mpsl.elf File opened for reading /proc/689/cmdline bot.mpsl.elf File opened for reading /proc/27/cmdline bot.mpsl.elf File opened for reading /proc/735/cmdline bot.mpsl.elf File opened for reading /proc/781/cmdline bot.mpsl.elf File opened for reading /proc/9/cmdline bot.mpsl.elf File opened for reading /proc/10/cmdline bot.mpsl.elf File opened for reading /proc/399/cmdline bot.mpsl.elf File opened for reading /proc/736/cmdline bot.mpsl.elf File opened for reading /proc/745/cmdline bot.mpsl.elf File opened for reading /proc/763/cmdline bot.mpsl.elf File opened for reading /proc/387/cmdline bot.mpsl.elf File opened for reading /proc/388/cmdline bot.mpsl.elf File opened for reading /proc/710/cmdline bot.mpsl.elf File opened for reading /proc/747/cmdline bot.mpsl.elf File opened for reading /proc/24/cmdline bot.mpsl.elf File opened for reading /proc/181/cmdline bot.mpsl.elf File opened for reading /proc/325/cmdline bot.mpsl.elf File opened for reading /proc/116/cmdline bot.mpsl.elf File opened for reading /proc/334/cmdline bot.mpsl.elf File opened for reading /proc/691/cmdline bot.mpsl.elf File opened for reading /proc/847/cmdline bot.mpsl.elf File opened for reading /proc/30/cmdline bot.mpsl.elf File opened for reading /proc/47/cmdline bot.mpsl.elf File opened for reading /proc/411/cmdline bot.mpsl.elf File opened for reading /proc/718/cmdline bot.mpsl.elf File opened for reading /proc/764/cmdline bot.mpsl.elf File opened for reading /proc/780/cmdline bot.mpsl.elf File opened for reading /proc/893/cmdline bot.mpsl.elf File opened for reading /proc/110/cmdline bot.mpsl.elf File opened for reading /proc/111/cmdline bot.mpsl.elf File opened for reading /proc/760/cmdline bot.mpsl.elf