Analysis

  • max time kernel
    150s
  • max time network
    152s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20240611-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    16-12-2024 10:46

General

  • Target

    main_mips.elf

  • Size

    169KB

  • MD5

    1d7394c2ea5a7ab2c932281be7c11bdd

  • SHA1

    2a9c9f9270872a0d0f6cf46ef5e75a7a7473ba79

  • SHA256

    261cbea15e9c316a7a13d6ee7c496feb4364d264355821dc03664c17f398bcd1

  • SHA512

    09cb1d3454cbdf14396d861a9b6534925fd9a3b8aa91a322a0b964e486d83d002422330a06486d58b2ec237509e0a3d6751d242b7386c32af3cb308787968d49

  • SSDEEP

    3072:jg57RE7LHZwbq1YSBan1yvbysxr1uGSxI:jglRE7LHZ0Bqyy1BSxI

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Traces itself 2 IoCs

    Traces itself to prevent debugging attempts

  • Changes its process name 1 IoCs
  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/main_mips.elf
    /tmp/main_mips.elf
    1⤵
    • Deletes itself
    • Traces itself
    • Changes its process name
    • System Network Configuration Discovery
    • Writes file to tmp directory
    PID:709

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads