9bb3e85491646faf1935889fd6e0070a426e00992866d43ae6177345aefe0f48 | Triage

Analysis

max time kernel
1s
max time network
9s
platform
debian-12_mipsel
resource
debian12-mipsel-20240221-en
resource tags

arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
11-01-2025 06:43

Sharing

Report Analysis Logs

General

Target

2.elf
Size

119KB
MD5

8a4a9878c51f015b30a0af880041f0e5
SHA1

2e9c9fbfadef4915af8ad4483032f48dbc248ff4
SHA256

9bb3e85491646faf1935889fd6e0070a426e00992866d43ae6177345aefe0f48
SHA512

cda29f277679cb6b7e57dc07a62ce51caed9d616d227f588b1be14e49b499065873e62734c2ef83a805730439ae24dc5e77971062da96ce7f184dfdd965436f0
SSDEEP

3072:peVncToNXQ5KTFjwq+qFXd4B9ku8hAyUX0v7p68:WEuj+KXd4B+hAyUX0v7p68

Score

3^/10

discovery

Malware Config

Signatures

Reads runtime system information 25 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/203/cmdline	2.elf
File opened for reading	/proc/373/cmdline	2.elf
File opened for reading	/proc/692/cmdline	2.elf
File opened for reading	/proc/695/cmdline	2.elf
File opened for reading	/proc/714/cmdline	2.elf
File opened for reading	/proc/673/cmdline	2.elf
File opened for reading	/proc/712/cmdline	2.elf
File opened for reading	/proc/741/cmdline	2.elf
File opened for reading	/proc/744/cmdline	2.elf
File opened for reading	/proc/746/cmdline	2.elf
File opened for reading	/proc/745/status	2.elf
File opened for reading	/proc/370/cmdline	2.elf
File opened for reading	/proc/375/cmdline	2.elf
File opened for reading	/proc/377/cmdline	2.elf
File opened for reading	/proc/388/cmdline	2.elf
File opened for reading	/proc/180/cmdline	2.elf
File opened for reading	/proc/262/cmdline	2.elf
File opened for reading	/proc/384/cmdline	2.elf
File opened for reading	/proc/392/cmdline	2.elf
File opened for reading	/proc/393/cmdline	2.elf
File opened for reading	/proc/418/cmdline	2.elf
File opened for reading	/proc/676/cmdline	2.elf
File opened for reading	/proc/677/cmdline	2.elf
File opened for reading	/proc/711/cmdline	2.elf
File opened for reading	/proc/748/cmdline	2.elf

/tmp/2.elf
/tmp/2.elf
1⤵
- Reads runtime system information
PID:745

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads