a1764110fd3a13247f1636f229fc171dc20a6ea459781b463b4f1d4182bbbfed | Triage

Analysis

max time kernel
150s
max time network
147s
platform
debian-9_mips
resource
debian9-mipsbe-20240611-en
resource tags

arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
27-12-2024 01:07

Sharing

Report Analysis Logs

General

Target

feiwbps.elf
Size

187KB
MD5

6626ac2acfe70c0ff0b200605f24b429
SHA1

68723685088745e293273d1012de12acd1cc4ad3
SHA256

a1764110fd3a13247f1636f229fc171dc20a6ea459781b463b4f1d4182bbbfed
SHA512

e484fecaf71e3d956fd67531405b8048fe6bd55ce582aa5ae2fad30454bce3932f4dd196e2403c5e77923a589d2d655799304cf720b677332aca219c350cd7c5
SSDEEP

3072:dt5d18QCYwJmoQyTZKEr1rusM0v2TsUETlDKp:dt5dyQCYwJmc06uMv2AUclmp

Score

7^/10

Malware Config

Signatures

Deletes itself 1 IoCs

pid	Process
712	feiwbps.elf

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	httpd	710	feiwbps.elf

/tmp/feiwbps.elf
/tmp/feiwbps.elf
1⤵
- Deletes itself
- Changes its process name
PID:710

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads