Analysis
-
max time kernel
150s -
max time network
154s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
-
submitted
17-12-2024 03:09
General
-
Target
61cccede630570a4ad83d336e33528872cbd2a8b5f70a73598a8d7c62c3e36ea.elf
-
Size
169KB
-
MD5
9515a3c74419d2cd4ff19bf8e6d87d64
-
SHA1
15f4bee3f8d93b463ed88af39b91c466cb805464
-
SHA256
61cccede630570a4ad83d336e33528872cbd2a8b5f70a73598a8d7c62c3e36ea
-
SHA512
8fe6d40333c0e85e99dc486146d43f7de25b5e5217577363401e430ffd487f7a4d70ee9b985d018e64bd7d25240c3bff6f99184ea1b298d2a24909c8ebe2ef22
-
SSDEEP
3072:jg57R+7LHZwbq1YSBan1yvbysxr1uGSRI:jglR+7LHZ0Bqyy1BSRI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
-
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
-
Changes its process name 1 IoCs
-
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/61cccede630570a4ad83d336e33528872cbd2a8b5f70a73598a8d7c62c3e36ea.elf/tmp/61cccede630570a4ad83d336e33528872cbd2a8b5f70a73598a8d7c62c3e36ea.elf1⤵
- Deletes itself
- Traces itself
- Changes its process name
- Writes file to tmp directory