Analysis
-
max time kernel
150s -
max time network
148s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
-
submitted
16-12-2024 09:24
General
-
Target
main_mips.elf
-
Size
169KB
-
MD5
9515a3c74419d2cd4ff19bf8e6d87d64
-
SHA1
15f4bee3f8d93b463ed88af39b91c466cb805464
-
SHA256
61cccede630570a4ad83d336e33528872cbd2a8b5f70a73598a8d7c62c3e36ea
-
SHA512
8fe6d40333c0e85e99dc486146d43f7de25b5e5217577363401e430ffd487f7a4d70ee9b985d018e64bd7d25240c3bff6f99184ea1b298d2a24909c8ebe2ef22
-
SSDEEP
3072:jg57R+7LHZwbq1YSBan1yvbysxr1uGSRI:jglR+7LHZ0Bqyy1BSRI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/main_mips.elf/tmp/main_mips.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- System Network Configuration Discovery
- Writes file to tmp directory