Analysis
-
max time kernel
151s -
max time network
151s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240729-en -
resource tags
arch:mipselimage:debian12-mipsel-20240729-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
22-12-2024 23:17
Behavioral task
behavioral1
Sample
bot.mpsl.elf
Resource
debian12-mipsel-20240729-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
bot.mpsl.elf
-
Size
177KB
-
MD5
51548c5a6c5b3dabaee77a776b5bf25d
-
SHA1
a3a470591a524903db98ca82a6a3a88a0a165186
-
SHA256
1a23eb2632283613778fcfbeef1c2e29a1d95f2751c2613745b21c411629a5d3
-
SHA512
51f8f0a92fe49d525dc9e1b97fe6a187b6424be0c0998aa8bd0dcd3a195bf215e35e71b5438ea5515e32a9b71fa4a792a6b2673b1c6da8d7500df0530e5b5c28
-
SSDEEP
3072:Mwoe3spmZt9nQiX/GpO1SMRpp6NWJdWQRi:MnSsEZDQiX/2ObRWoDW2
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 741 bot.mpsl.elf -
description ioc Process File opened for reading /proc/10/cmdline bot.mpsl.elf File opened for reading /proc/788/cmdline bot.mpsl.elf File opened for reading /proc/793/cmdline bot.mpsl.elf File opened for reading /proc/801/cmdline bot.mpsl.elf File opened for reading /proc/34/cmdline bot.mpsl.elf File opened for reading /proc/667/cmdline bot.mpsl.elf File opened for reading /proc/790/cmdline bot.mpsl.elf File opened for reading /proc/48/cmdline bot.mpsl.elf File opened for reading /proc/113/cmdline bot.mpsl.elf File opened for reading /proc/761/cmdline bot.mpsl.elf File opened for reading /proc/11/cmdline bot.mpsl.elf File opened for reading /proc/390/cmdline bot.mpsl.elf File opened for reading /proc/758/cmdline bot.mpsl.elf File opened for reading /proc/759/cmdline bot.mpsl.elf File opened for reading /proc/776/cmdline bot.mpsl.elf File opened for reading /proc/789/cmdline bot.mpsl.elf File opened for reading /proc/32/cmdline bot.mpsl.elf File opened for reading /proc/59/cmdline bot.mpsl.elf File opened for reading /proc/352/cmdline bot.mpsl.elf File opened for reading /proc/4/cmdline bot.mpsl.elf File opened for reading /proc/23/cmdline bot.mpsl.elf File opened for reading /proc/711/cmdline bot.mpsl.elf File opened for reading /proc/737/cmdline bot.mpsl.elf File opened for reading /proc/798/cmdline bot.mpsl.elf File opened for reading /proc/811/cmdline bot.mpsl.elf File opened for reading /proc/3/cmdline bot.mpsl.elf File opened for reading /proc/8/cmdline bot.mpsl.elf File opened for reading /proc/25/cmdline bot.mpsl.elf File opened for reading /proc/53/cmdline bot.mpsl.elf File opened for reading /proc/768/cmdline bot.mpsl.elf File opened for reading /proc/2/cmdline bot.mpsl.elf File opened for reading /proc/20/cmdline bot.mpsl.elf File opened for reading /proc/781/cmdline bot.mpsl.elf File opened for reading /proc/6/cmdline bot.mpsl.elf File opened for reading /proc/12/cmdline bot.mpsl.elf File opened for reading /proc/394/cmdline bot.mpsl.elf File opened for reading /proc/765/cmdline bot.mpsl.elf File opened for reading /proc/15/cmdline bot.mpsl.elf File opened for reading /proc/33/cmdline bot.mpsl.elf File opened for reading /proc/778/cmdline bot.mpsl.elf File opened for reading /proc/792/cmdline bot.mpsl.elf File opened for reading /proc/800/cmdline bot.mpsl.elf File opened for reading /proc/380/cmdline bot.mpsl.elf File opened for reading /proc/695/cmdline bot.mpsl.elf File opened for reading /proc/782/cmdline bot.mpsl.elf File opened for reading /proc/805/cmdline bot.mpsl.elf File opened for reading /proc/14/cmdline bot.mpsl.elf File opened for reading /proc/19/cmdline bot.mpsl.elf File opened for reading /proc/114/cmdline bot.mpsl.elf File opened for reading /proc/732/cmdline bot.mpsl.elf File opened for reading /proc/803/cmdline bot.mpsl.elf File opened for reading /proc/13/cmdline bot.mpsl.elf File opened for reading /proc/24/cmdline bot.mpsl.elf File opened for reading /proc/118/cmdline bot.mpsl.elf File opened for reading /proc/119/cmdline bot.mpsl.elf File opened for reading /proc/744/cmdline bot.mpsl.elf File opened for reading /proc/35/cmdline bot.mpsl.elf File opened for reading /proc/769/cmdline bot.mpsl.elf File opened for reading /proc/9/cmdline bot.mpsl.elf File opened for reading /proc/112/cmdline bot.mpsl.elf File opened for reading /proc/752/cmdline bot.mpsl.elf File opened for reading /proc/760/cmdline bot.mpsl.elf File opened for reading /proc/775/cmdline bot.mpsl.elf File opened for reading /proc/697/cmdline bot.mpsl.elf