Analysis
-
max time kernel
149s -
max time network
150s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240418-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240418-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
03-02-2025 20:47
Behavioral task
behavioral1
Sample
main_mips.elf
Resource
debian9-mipsbe-20240418-en
debian-9-mips
5 signatures
150 seconds
General
-
Target
main_mips.elf
-
Size
169KB
-
MD5
f01708bdfa1fadc886853983e44fae83
-
SHA1
f9a5029b60596e8d64b7f4ea414b869f2f0d7026
-
SHA256
56ea67c6a083ce09d99956d0de613e784106a65f320053a74e0858ca2a7e997c
-
SHA512
0ccabec8a926fc4a3ff6e5af718640a16462cca2686bef29a81ec9c7f6daf24c211de7ceba140e02fcb6bc09122c9d6cdbaa9209a3ed85988501a14b8df26310
-
SSDEEP
3072:jg57RH7LHZwbq1YSBan1yvbysxr1uGSSI:jglRH7LHZ0Bqyy1BSSI
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 710 main_mips.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 710 main_mips.elf 711 main_mips.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 710 main_mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 710 main_mips.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mips.elf main_mips.elf