Analysis
-
max time kernel
152s -
max time network
155s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240418-en -
resource tags
arch:mipselimage:debian12-mipsel-20240418-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
22-12-2024 23:26
Behavioral task
behavioral1
Sample
bot.mpsl.elf
Resource
debian12-mipsel-20240418-en
debian-12-mipsel
3 signatures
150 seconds
General
-
Target
bot.mpsl.elf
-
Size
177KB
-
MD5
51548c5a6c5b3dabaee77a776b5bf25d
-
SHA1
a3a470591a524903db98ca82a6a3a88a0a165186
-
SHA256
1a23eb2632283613778fcfbeef1c2e29a1d95f2751c2613745b21c411629a5d3
-
SHA512
51f8f0a92fe49d525dc9e1b97fe6a187b6424be0c0998aa8bd0dcd3a195bf215e35e71b5438ea5515e32a9b71fa4a792a6b2673b1c6da8d7500df0530e5b5c28
-
SSDEEP
3072:Mwoe3spmZt9nQiX/GpO1SMRpp6NWJdWQRi:MnSsEZDQiX/2ObRWoDW2
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a- M" ! 744 bot.mpsl.elf -
description ioc Process File opened for reading /proc/409/cmdline bot.mpsl.elf File opened for reading /proc/711/cmdline bot.mpsl.elf File opened for reading /proc/379/cmdline bot.mpsl.elf File opened for reading /proc/382/cmdline bot.mpsl.elf File opened for reading /proc/668/cmdline bot.mpsl.elf File opened for reading /proc/766/cmdline bot.mpsl.elf File opened for reading /proc/28/cmdline bot.mpsl.elf File opened for reading /proc/33/cmdline bot.mpsl.elf File opened for reading /proc/110/cmdline bot.mpsl.elf File opened for reading /proc/203/cmdline bot.mpsl.elf File opened for reading /proc/714/cmdline bot.mpsl.elf File opened for reading /proc/761/cmdline bot.mpsl.elf File opened for reading /proc/775/cmdline bot.mpsl.elf File opened for reading /proc/10/cmdline bot.mpsl.elf File opened for reading /proc/332/cmdline bot.mpsl.elf File opened for reading /proc/760/cmdline bot.mpsl.elf File opened for reading /proc/763/cmdline bot.mpsl.elf File opened for reading /proc/781/cmdline bot.mpsl.elf File opened for reading /proc/3/cmdline bot.mpsl.elf File opened for reading /proc/37/cmdline bot.mpsl.elf File opened for reading /proc/53/cmdline bot.mpsl.elf File opened for reading /proc/137/cmdline bot.mpsl.elf File opened for reading /proc/17/cmdline bot.mpsl.elf File opened for reading /proc/777/cmdline bot.mpsl.elf File opened for reading /proc/401/cmdline bot.mpsl.elf File opened for reading /proc/748/cmdline bot.mpsl.elf File opened for reading /proc/15/cmdline bot.mpsl.elf File opened for reading /proc/35/cmdline bot.mpsl.elf File opened for reading /proc/424/cmdline bot.mpsl.elf File opened for reading /proc/44/cmdline bot.mpsl.elf File opened for reading /proc/710/cmdline bot.mpsl.elf File opened for reading /proc/14/cmdline bot.mpsl.elf File opened for reading /proc/773/cmdline bot.mpsl.elf File opened for reading /proc/26/cmdline bot.mpsl.elf File opened for reading /proc/13/cmdline bot.mpsl.elf File opened for reading /proc/19/cmdline bot.mpsl.elf File opened for reading /proc/768/cmdline bot.mpsl.elf File opened for reading /proc/786/cmdline bot.mpsl.elf File opened for reading /proc/1/cmdline bot.mpsl.elf File opened for reading /proc/738/cmdline bot.mpsl.elf File opened for reading /proc/788/cmdline bot.mpsl.elf File opened for reading /proc/22/cmdline bot.mpsl.elf File opened for reading /proc/111/cmdline bot.mpsl.elf File opened for reading /proc/384/cmdline bot.mpsl.elf File opened for reading /proc/395/cmdline bot.mpsl.elf File opened for reading /proc/772/cmdline bot.mpsl.elf File opened for reading /proc/25/cmdline bot.mpsl.elf File opened for reading /proc/20/cmdline bot.mpsl.elf File opened for reading /proc/24/cmdline bot.mpsl.elf File opened for reading /proc/355/cmdline bot.mpsl.elf File opened for reading /proc/11/cmdline bot.mpsl.elf File opened for reading /proc/733/cmdline bot.mpsl.elf File opened for reading /proc/782/cmdline bot.mpsl.elf File opened for reading /proc/21/cmdline bot.mpsl.elf File opened for reading /proc/722/cmdline bot.mpsl.elf File opened for reading /proc/770/cmdline bot.mpsl.elf File opened for reading /proc/785/cmdline bot.mpsl.elf File opened for reading /proc/113/cmdline bot.mpsl.elf File opened for reading /proc/719/cmdline bot.mpsl.elf File opened for reading /proc/734/cmdline bot.mpsl.elf File opened for reading /proc/769/cmdline bot.mpsl.elf File opened for reading /proc/679/cmdline bot.mpsl.elf File opened for reading /proc/136/cmdline bot.mpsl.elf File opened for reading /proc/112/cmdline bot.mpsl.elf