Analysis
-
max time kernel
150s -
max time network
150s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240611-en -
resource tags
-
submitted
12-12-2024 02:13
General
-
Target
317e25e1e735235fcc4b7ece5d8584916e82c1cf84027142d0e623b9bf5474d3.elf
-
Size
173KB
-
MD5
c9e235d769811d070c6a2d2e3965b79c
-
SHA1
0808da6ba59e571593c6e8f92260d568a0a21367
-
SHA256
317e25e1e735235fcc4b7ece5d8584916e82c1cf84027142d0e623b9bf5474d3
-
SHA512
7f0b3c6f131d7ece6b8e18ff9078fb66dcedcba26650d2781ecfa871dc0c4f7b6ca778b96b9aa3c63e54ddd753a984f93ff6b53410fe8287772001e8af2e7982
-
SSDEEP
3072:nKpzGZeNkSfcQqmav8SqaRVlnYz65n1t:nKYZeNYQqmeqavlg65n
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/317e25e1e735235fcc4b7ece5d8584916e82c1cf84027142d0e623b9bf5474d3.elf/tmp/317e25e1e735235fcc4b7ece5d8584916e82c1cf84027142d0e623b9bf5474d3.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory