Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240729-en -
resource tags
arch:mipselimage:debian9-mipsel-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
19-12-2024 02:34
Behavioral task
behavioral1
Sample
37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf
Resource
debian9-mipsel-20240729-en
debian-9-mipsel
3 signatures
150 seconds
General
-
Target
37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf
-
Size
177KB
-
MD5
0e9f299b817cb11b75735590e67d00a9
-
SHA1
2201d29b42d2992c21a075c2acdc2939c4e7e76e
-
SHA256
37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5
-
SHA512
8b52a0cd196f8b3bab8312d069485160acf97370d97abc6a23491a32bbcde161fd9a65c9f276b260aec4f12b3023d323fe823c9b494b2808d5e043da3e196525
-
SSDEEP
3072:Mwoe3sp3Zt9nQiX/GpO1SMRpp6NWJdWQRi:MnSsRZDQiX/2ObRWoDW2
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 706 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf -
description ioc Process File opened for reading /proc/75/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/122/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/671/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/791/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/792/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/3/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/717/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/721/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/729/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/769/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/780/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/785/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/13/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/325/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/349/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/742/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/776/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/765/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/348/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/682/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/718/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/719/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/751/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/808/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/20/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/152/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/681/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/705/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/737/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/21/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/734/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/747/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/773/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/783/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/741/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/745/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/789/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/803/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/766/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/790/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/799/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/1/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/78/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/704/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/722/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/757/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/9/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/778/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/794/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/23/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/385/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/678/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/713/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/786/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/74/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/157/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/243/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/350/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/787/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/761/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/763/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/788/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/6/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf File opened for reading /proc/24/cmdline 37dc7a6902af06b7ef323021242462faf06ee462304520d4b936a39d8fe5eec5.elf