Analysis
-
max time kernel
150s -
max time network
155s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240226-en -
resource tags
arch:mipselimage:debian9-mipsel-20240226-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
16-12-2024 02:21
Behavioral task
behavioral1
Sample
699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf
Resource
debian9-mipsel-20240226-en
debian-9-mipsel
4 signatures
150 seconds
General
-
Target
699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf
-
Size
173KB
-
MD5
44d5dd51a9e9f35d63fe4cf38108434a
-
SHA1
0456eac7626a0ffc91ef4ba153a63a07edbe0c01
-
SHA256
699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf
-
SHA512
abea339c85fb772ecf8fbdd8c2963fa3835bd54ccc5a55bac498ab49bf1ae029a8efe8d197a8ade55f5d4f84d3ac7a507fcf7c848237a8618f8509cc7a1255f7
-
SSDEEP
3072:nKpzGteNkSfcQqmav8SqaRVlnYz65DVt:nKYteNYQqmeqavlg65D
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 707 699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 707 699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf 708 699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 707 699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf 699175415c5410aa49d5ffc58e5ba2a015da2a5266288c0b07614041be8f1bcf.elf