Analysis

  • max time kernel
    150s
  • max time network
    154s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20240729-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    17-12-2024 03:14

General

  • Target

    70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf

  • Size

    173KB

  • MD5

    fbafa7273c7a2af02d17fefff00d268b

  • SHA1

    a9e2ae033385ea4d100947d633b9e9f10b617d2d

  • SHA256

    70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1

  • SHA512

    c896ecde8c33349a3e1d53ae2b054077acfbc93d2fa362c0b00eb58502a31faa4557c8d36335286874baacc2fc398fb08fcc64f5a5512e09c66d401a25827f2c

  • SSDEEP

    3072:nKpzG1eNkSfcQqmav8SqaRVlnYz65LVt:nKY1eNYQqmeqavlg65L

Score
7/10

Malware Config

Signatures

  • Deletes itself 1 IoCs
  • Traces itself 2 IoCs

    Traces itself to prevent debugging attempts

  • Changes its process name 1 IoCs
  • Writes file to tmp directory 1 IoCs

    Malware often drops required files in the /tmp directory.

Processes

  • /tmp/70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf
    /tmp/70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf
    1⤵
    • Deletes itself
    • Traces itself
    • Changes its process name
    • Writes file to tmp directory
    PID:738

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads