Analysis
-
max time kernel
150s -
max time network
155s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
22-12-2024 08:40
Behavioral task
behavioral1
Sample
vlxx.mips.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
4 signatures
150 seconds
General
-
Target
vlxx.mips.elf
-
Size
169KB
-
MD5
61d1c2838055600e695ab1d68fb7f63c
-
SHA1
eefdb6413a60c6e6e51265a9e2708d8126fcafd6
-
SHA256
032c098cc80b9f6e06be43f3dcd3772af914e1cc1b999ee66b8b3c87573320dd
-
SHA512
3af5316b10aa568bb7f496849c64be2906ee3027cc0b1b1e1e94a2a564499e5c148bebad2085815f4dcb1be5e35260a8b2151cb150f81b6b30465f85ca3ab03b
-
SSDEEP
1536:T16zePrQiQY35Y05Y9vt6Sw6cFL+z14R7oOe/3LM76qfTOSV2dLi6jyfj2dN:TnPvQK46SKFahy7ox3LIS4OLnyfj2dN
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself -"6 707 vlxx.mips.elf -
description ioc Process File opened for reading /proc/17/cmdline vlxx.mips.elf File opened for reading /proc/496/cmdline vlxx.mips.elf File opened for reading /proc/705/cmdline vlxx.mips.elf File opened for reading /proc/726/cmdline vlxx.mips.elf File opened for reading /proc/313/cmdline vlxx.mips.elf File opened for reading /proc/725/cmdline vlxx.mips.elf File opened for reading /proc/734/cmdline vlxx.mips.elf File opened for reading /proc/742/cmdline vlxx.mips.elf File opened for reading /proc/755/cmdline vlxx.mips.elf File opened for reading /proc/15/cmdline vlxx.mips.elf File opened for reading /proc/18/cmdline vlxx.mips.elf File opened for reading /proc/36/cmdline vlxx.mips.elf File opened for reading /proc/145/cmdline vlxx.mips.elf File opened for reading /proc/716/cmdline vlxx.mips.elf File opened for reading /proc/771/cmdline vlxx.mips.elf File opened for reading /proc/19/cmdline vlxx.mips.elf File opened for reading /proc/731/cmdline vlxx.mips.elf File opened for reading /proc/747/cmdline vlxx.mips.elf File opened for reading /proc/750/cmdline vlxx.mips.elf File opened for reading /proc/784/cmdline vlxx.mips.elf File opened for reading /proc/2/cmdline vlxx.mips.elf File opened for reading /proc/8/cmdline vlxx.mips.elf File opened for reading /proc/24/cmdline vlxx.mips.elf File opened for reading /proc/223/cmdline vlxx.mips.elf File opened for reading /proc/371/cmdline vlxx.mips.elf File opened for reading /proc/703/cmdline vlxx.mips.elf File opened for reading /proc/749/cmdline vlxx.mips.elf File opened for reading /proc/723/cmdline vlxx.mips.elf File opened for reading /proc/744/cmdline vlxx.mips.elf File opened for reading /proc/12/cmdline vlxx.mips.elf File opened for reading /proc/21/cmdline vlxx.mips.elf File opened for reading /proc/384/cmdline vlxx.mips.elf File opened for reading /proc/704/cmdline vlxx.mips.elf File opened for reading /proc/719/cmdline vlxx.mips.elf File opened for reading /proc/722/cmdline vlxx.mips.elf File opened for reading /proc/71/cmdline vlxx.mips.elf File opened for reading /proc/768/cmdline vlxx.mips.elf File opened for reading /proc/346/cmdline vlxx.mips.elf File opened for reading /proc/754/cmdline vlxx.mips.elf File opened for reading /proc/781/cmdline vlxx.mips.elf File opened for reading /proc/149/cmdline vlxx.mips.elf File opened for reading /proc/758/cmdline vlxx.mips.elf File opened for reading /proc/767/cmdline vlxx.mips.elf File opened for reading /proc/146/cmdline vlxx.mips.elf File opened for reading /proc/699/cmdline vlxx.mips.elf File opened for reading /proc/701/cmdline vlxx.mips.elf File opened for reading /proc/732/cmdline vlxx.mips.elf File opened for reading /proc/16/cmdline vlxx.mips.elf File opened for reading /proc/736/cmdline vlxx.mips.elf File opened for reading /proc/22/cmdline vlxx.mips.elf File opened for reading /proc/383/cmdline vlxx.mips.elf File opened for reading /proc/751/cmdline vlxx.mips.elf File opened for reading /proc/757/cmdline vlxx.mips.elf File opened for reading /proc/779/cmdline vlxx.mips.elf File opened for reading /proc/11/cmdline vlxx.mips.elf File opened for reading /proc/733/cmdline vlxx.mips.elf File opened for reading /proc/746/cmdline vlxx.mips.elf File opened for reading /proc/762/cmdline vlxx.mips.elf File opened for reading /proc/765/cmdline vlxx.mips.elf File opened for reading /proc/773/cmdline vlxx.mips.elf File opened for reading /proc/73/cmdline vlxx.mips.elf File opened for reading /proc/76/cmdline vlxx.mips.elf File opened for reading /proc/720/cmdline vlxx.mips.elf File opened for reading /proc/728/cmdline vlxx.mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 707 vlxx.mips.elf