Analysis
-
max time kernel
151s -
max time network
147s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
16-12-2024 09:23
Behavioral task
behavioral1
Sample
main_mips.elf
Resource
debian9-mipsbe-20240418-en
debian-9-mips
5 signatures
150 seconds
General
-
Target
main_mips.elf
-
Size
169KB
-
MD5
95d7b1760c32fceda13e790a204e6c39
-
SHA1
bf2f8521cdb886fb8ac2ad7a2d55774da6af7520
-
SHA256
7e79d789352d6b6193608e6e014fed436255d67aad029e41bc268f1ada6cb829
-
SHA512
9cb1ed5531c49b00448aa01b7b46a7eaccd23da9acbb5901906eec56ffab0d66aaac62f258ac1a0eb27d2e1498a24e2e16a204a47ce3d9ebeb00c93028329a43
-
SSDEEP
3072:jg57RW7LHZwbq1YSBan1yvbysxr1uGSvI:jglRW7LHZ0Bqyy1BSvI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 741 main_mips.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 741 main_mips.elf 742 main_mips.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 741 main_mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 741 main_mips.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mips.elf main_mips.elf