Analysis
-
max time kernel
150s -
max time network
135s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
-
submitted
17-12-2024 02:21
General
-
Target
261cbea15e9c316a7a13d6ee7c496feb4364d264355821dc03664c17f398bcd1.elf
-
Size
169KB
-
MD5
1d7394c2ea5a7ab2c932281be7c11bdd
-
SHA1
2a9c9f9270872a0d0f6cf46ef5e75a7a7473ba79
-
SHA256
261cbea15e9c316a7a13d6ee7c496feb4364d264355821dc03664c17f398bcd1
-
SHA512
09cb1d3454cbdf14396d861a9b6534925fd9a3b8aa91a322a0b964e486d83d002422330a06486d58b2ec237509e0a3d6751d242b7386c32af3cb308787968d49
-
SSDEEP
3072:jg57RE7LHZwbq1YSBan1yvbysxr1uGSxI:jglRE7LHZ0Bqyy1BSxI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/261cbea15e9c316a7a13d6ee7c496feb4364d264355821dc03664c17f398bcd1.elf/tmp/261cbea15e9c316a7a13d6ee7c496feb4364d264355821dc03664c17f398bcd1.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory