Analysis
-
max time kernel
150s -
max time network
154s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
30/12/2024, 02:44
Behavioral task
behavioral1
Sample
c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf
Resource
debian12-mipsel-20240221-en
4 signatures
150 seconds
General
-
Target
c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf
-
Size
173KB
-
MD5
c029e40e274644b7a5e12cbedf829d64
-
SHA1
df3b3dbe1214d8d77eb7b3cb71033f0e945c1c6c
-
SHA256
c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515
-
SHA512
c79fb4eafb0f91b698f28d8fd47c0cf7e44bc06db26d75dc7227d9c5a6723efcbe71f44de4afbfdb9f3af5bd0460ae491b55a3f02e712ba413a670a85f316caf
-
SSDEEP
3072:nKpzGZeNkSfcQqmav8SqaRVlnYz65G1t:nKYZeNYQqmeqavlg65G
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 745 c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 745 c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf 746 c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 745 c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf c7d3f9322b1df4367a776ed5450fe89b64e3fa03fb737c63660fb9a3771e0515.elf