Analysis
-
max time kernel
150s -
max time network
152s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
12-12-2024 02:32
General
-
Target
955cbbf3a88aff830ebfe25c72244a23c7a97ebfdbf5d2b36bfdf41a3ec115ac.elf
-
Size
169KB
-
MD5
d023cd33f8164f1e3c7f9e55e5b8df12
-
SHA1
8330f44628d43bb39a08340b9ae89cbd6e102f56
-
SHA256
955cbbf3a88aff830ebfe25c72244a23c7a97ebfdbf5d2b36bfdf41a3ec115ac
-
SHA512
672cd51d26a077a7b1e1211773e50d9f99b89a1c690720f776e89c3755baa8ab387f26e04d4b8b3eb3749a2cd3a4fd8b5dfdfac519c3de03a72cb7f9de9b99df
-
SSDEEP
3072:jg57Rd7LHZwbq1YSBan1yvbysxr1uGS4I:jglRd7LHZ0Bqyy1BS4I
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/955cbbf3a88aff830ebfe25c72244a23c7a97ebfdbf5d2b36bfdf41a3ec115ac.elf/tmp/955cbbf3a88aff830ebfe25c72244a23c7a97ebfdbf5d2b36bfdf41a3ec115ac.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory