Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240729-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240729-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
30-12-2024 02:14
Behavioral task
behavioral1
Sample
4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf
Resource
debian9-mipsbe-20240729-en
4 signatures
150 seconds
General
-
Target
4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf
-
Size
169KB
-
MD5
42dd0dd5a0d798b589d95dc36f1cbd99
-
SHA1
01ac69da0d1295b98ad88295c97d509849cd4f95
-
SHA256
4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece
-
SHA512
eeed4ddd565480c5d0bef441765b9eb2893f58ba55d55a7ebccb5a205dee6ba38142249029d770ce44a75fbe6c903939c096b656e0d78fe4e6682363818ece4e
-
SSDEEP
3072:jg57Rq7LHZwbq1YSBan1yvbysxr1uGSQY:jglRq7LHZ0Bqyy1BSQY
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 720 4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 720 4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf 721 4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 720 4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf 4d3aced5ba022dfb56457b0b542d928ee51494a2617e93d9b0b11cdf73b28ece.elf