Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20240418-en -
resource tags
arch:mipselimage:debian9-mipsel-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
02-02-2025 04:34
Behavioral task
behavioral1
Sample
83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf
Resource
debian9-mipsel-20240418-en
debian-9-mipsel
4 signatures
150 seconds
General
-
Target
83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf
-
Size
174KB
-
MD5
72764669cc69ad9f82b901f895067489
-
SHA1
96edb863e68500d321b04f380235a326b1fe1f80
-
SHA256
83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3
-
SHA512
607e08775447dead026d90f20cd4c3b5fbf2dd0d84dcc319e732d7270e77e4cfc97c35f3ae30cd4d412c9a2727c6002eae4c643f932d3e5b31542625d9dc522f
-
SSDEEP
1536:ZKMJ+T13jQ8EZsHjcM8GL6G/xrfDjeeUsJSqCWRZsGpS88ii/lHyWXN42i2mc7CR:ZLJyjRZDDqe5JhZ3i/o+JGR
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 710 83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 710 83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf 711 83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 710 83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf 83f34693036a2235635b98cfe104fe5da274b1d43bde54f8db2088af292fa7d3.elf