Analysis
-
max time kernel
150s -
max time network
152s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
16-12-2024 10:46
Behavioral task
behavioral1
Sample
main_mips.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
5 signatures
150 seconds
General
-
Target
main_mips.elf
-
Size
169KB
-
MD5
1d7394c2ea5a7ab2c932281be7c11bdd
-
SHA1
2a9c9f9270872a0d0f6cf46ef5e75a7a7473ba79
-
SHA256
261cbea15e9c316a7a13d6ee7c496feb4364d264355821dc03664c17f398bcd1
-
SHA512
09cb1d3454cbdf14396d861a9b6534925fd9a3b8aa91a322a0b964e486d83d002422330a06486d58b2ec237509e0a3d6751d242b7386c32af3cb308787968d49
-
SSDEEP
3072:jg57RE7LHZwbq1YSBan1yvbysxr1uGSxI:jglRE7LHZ0Bqyy1BSxI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 709 main_mips.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 709 main_mips.elf 711 main_mips.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 709 main_mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 709 main_mips.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mips.elf main_mips.elf