Analysis
-
max time kernel
152s -
max time network
160s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
17-12-2024 02:26
Behavioral task
behavioral1
Sample
30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf
Resource
debian12-mipsel-20240221-en
debian-12-mipsel
4 signatures
150 seconds
General
-
Target
30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf
-
Size
173KB
-
MD5
386df114047250484c5fa6735fffef65
-
SHA1
9da85e4b39200e9d4c62c268b5da822dbffe2c51
-
SHA256
30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252
-
SHA512
f384c714cea84185007180f0dd3689feb1949994f527d7152b533154976535b74cf18222dfa5d049cd315a2debd51a192faf7f76c8b0b03abe6c61b39380371c
-
SSDEEP
3072:nKpzG1eNkSfcQqmav8SqaRVlnYz65dVt:nKY1eNYQqmeqavlg65d
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 735 30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 735 30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf 737 30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 735 30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf 30172d104f169e40b336c7cecc0c49dc68de35d2b8f53eee798e21679a076252.elf