2d2fb27aec8a4f8c3d14c126d990c3b62e53f4b516c7077f116b1835bca99977

Analysis

max time kernel
145s
max time network
147s
platform
debian-9_mips
resource
debian9-mipsbe-20240418-en
resource tags

arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
25-12-2024 16:37

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Aqua.mips.elf
Size

67KB
MD5

dc3e0758199c2d3970447be20ff84396
SHA1

558ac59d3ad7e096892ad18deb8df9b78f6b3608
SHA256

2d2fb27aec8a4f8c3d14c126d990c3b62e53f4b516c7077f116b1835bca99977
SHA512

2f6fda12fdbf7f58944fb11737b6ad43d19be0d9602443658a7fd9c7d524a631716a221ded668478d2ad0abb2fe82678b6b1e00241775a8a7d6df808b5d0a7e4
SSDEEP

768:qeXr/3SwGEbwC1DEsl0d5P6HVGt/reJLDhE4l0ANCxa1M8k40nw94RyBFMPQ10yG:pls61Are5Dhjnk4g/ReTaeweJ6WA

Score

7^/10

discovery

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
713	Aqua.mips.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	711	Aqua.mips.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
711	Aqua.mips.elf

/tmp/Aqua.mips.elf
/tmp/Aqua.mips.elf
1⤵
- Deletes itself
- Changes its process name
- System Network Configuration Discovery
PID:711

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads