Analysis
-
max time kernel
150s -
max time network
154s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240729-en -
resource tags
arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
17-12-2024 03:14
Behavioral task
behavioral1
Sample
70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf
Resource
debian12-mipsel-20240729-en
debian-12-mipsel
4 signatures
150 seconds
General
-
Target
70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf
-
Size
173KB
-
MD5
fbafa7273c7a2af02d17fefff00d268b
-
SHA1
a9e2ae033385ea4d100947d633b9e9f10b617d2d
-
SHA256
70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1
-
SHA512
c896ecde8c33349a3e1d53ae2b054077acfbc93d2fa362c0b00eb58502a31faa4557c8d36335286874baacc2fc398fb08fcc64f5a5512e09c66d401a25827f2c
-
SSDEEP
3072:nKpzG1eNkSfcQqmav8SqaRVlnYz65LVt:nKY1eNYQqmeqavlg65L
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 738 70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 738 70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf 739 70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 738 70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf 70b19c9d4ff4b35b06b1ae032289f46f0fe6286db07cb4c2e8f476fe855225e1.elf