Analysis
-
max time kernel
150s -
max time network
150s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
18-12-2024 19:36
Behavioral task
behavioral1
Sample
bot.mips
Resource
debian9-mipsbe-20240611-en
debian-9-mips
4 signatures
150 seconds
General
-
Target
bot.mips
-
Size
177KB
-
MD5
a4488c1707634e53e00322ce6e461beb
-
SHA1
9426511d282db2a25a096f9f580bcb12a46e2b0b
-
SHA256
a9cfe7dbdc25e540fae253b4246da912c800fa1e480e5378ed05b373154ef70b
-
SHA512
97b1c392c11c824e973cce2497b22eb96cca99fbc1216566ed9427afc29a45b3e2b03490c4af37300a6d13718d218b3aaff38d9dbdc72e76cb2a0b093c41abdd
-
SSDEEP
3072:f6uSXvJnzjP0jSazpyi579Yxy52tIen9A6qewZQDhaMh:f6uSXvJnvP0+azYigAEnfqnZ4haa
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 699 bot.mips -
description ioc Process File opened for reading /proc/741/cmdline bot.mips File opened for reading /proc/785/cmdline bot.mips File opened for reading /proc/807/cmdline bot.mips File opened for reading /proc/11/cmdline bot.mips File opened for reading /proc/70/cmdline bot.mips File opened for reading /proc/115/cmdline bot.mips File opened for reading /proc/758/cmdline bot.mips File opened for reading /proc/808/cmdline bot.mips File opened for reading /proc/708/cmdline bot.mips File opened for reading /proc/716/cmdline bot.mips File opened for reading /proc/738/cmdline bot.mips File opened for reading /proc/744/cmdline bot.mips File opened for reading /proc/767/cmdline bot.mips File opened for reading /proc/770/cmdline bot.mips File opened for reading /proc/772/cmdline bot.mips File opened for reading /proc/793/cmdline bot.mips File opened for reading /proc/804/cmdline bot.mips File opened for reading /proc/14/cmdline bot.mips File opened for reading /proc/18/cmdline bot.mips File opened for reading /proc/20/cmdline bot.mips File opened for reading /proc/76/cmdline bot.mips File opened for reading /proc/691/cmdline bot.mips File opened for reading /proc/694/cmdline bot.mips File opened for reading /proc/718/cmdline bot.mips File opened for reading /proc/733/cmdline bot.mips File opened for reading /proc/782/cmdline bot.mips File opened for reading /proc/788/cmdline bot.mips File opened for reading /proc/696/cmdline bot.mips File opened for reading /proc/728/cmdline bot.mips File opened for reading /proc/745/cmdline bot.mips File opened for reading /proc/771/cmdline bot.mips File opened for reading /proc/676/cmdline bot.mips File opened for reading /proc/748/cmdline bot.mips File opened for reading /proc/805/cmdline bot.mips File opened for reading /proc/36/cmdline bot.mips File opened for reading /proc/69/cmdline bot.mips File opened for reading /proc/377/cmdline bot.mips File opened for reading /proc/493/cmdline bot.mips File opened for reading /proc/723/cmdline bot.mips File opened for reading /proc/754/cmdline bot.mips File opened for reading /proc/783/cmdline bot.mips File opened for reading /proc/797/cmdline bot.mips File opened for reading /proc/463/cmdline bot.mips File opened for reading /proc/703/cmdline bot.mips File opened for reading /proc/757/cmdline bot.mips File opened for reading /proc/801/cmdline bot.mips File opened for reading /proc/79/cmdline bot.mips File opened for reading /proc/737/cmdline bot.mips File opened for reading /proc/774/cmdline bot.mips File opened for reading /proc/781/cmdline bot.mips File opened for reading /proc/794/cmdline bot.mips File opened for reading /proc/740/cmdline bot.mips File opened for reading /proc/743/cmdline bot.mips File opened for reading /proc/799/cmdline bot.mips File opened for reading /proc/9/cmdline bot.mips File opened for reading /proc/74/cmdline bot.mips File opened for reading /proc/82/cmdline bot.mips File opened for reading /proc/375/cmdline bot.mips File opened for reading /proc/736/cmdline bot.mips File opened for reading /proc/777/cmdline bot.mips File opened for reading /proc/779/cmdline bot.mips File opened for reading /proc/7/cmdline bot.mips File opened for reading /proc/709/cmdline bot.mips File opened for reading /proc/720/cmdline bot.mips -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 699 bot.mips