Analysis

  • max time kernel
    151s
  • max time network
    147s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240418-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    16-12-2024 09:23

General

  • Target

    main_mips.elf

  • Size

    169KB

  • MD5

    95d7b1760c32fceda13e790a204e6c39

  • SHA1

    bf2f8521cdb886fb8ac2ad7a2d55774da6af7520

  • SHA256

    7e79d789352d6b6193608e6e014fed436255d67aad029e41bc268f1ada6cb829

  • SHA512

    9cb1ed5531c49b00448aa01b7b46a7eaccd23da9acbb5901906eec56ffab0d66aaac62f258ac1a0eb27d2e1498a24e2e16a204a47ce3d9ebeb00c93028329a43

  • SSDEEP

    3072:jg57RW7LHZwbq1YSBan1yvbysxr1uGSvI:jglRW7LHZ0Bqyy1BSvI

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Traces itself 2 IoCs

    Traces itself to prevent debugging attempts

  • Changes its process name 1 IoCs
  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/main_mips.elf
    /tmp/main_mips.elf
    1⤵
    • Deletes itself
    • Traces itself
    • Changes its process name
    • System Network Configuration Discovery
    • Writes file to tmp directory
    PID:741

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads