Analysis
-
max time kernel
151s -
max time network
152s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
04/02/2025, 03:56
Behavioral task
behavioral1
Sample
479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf
Resource
debian12-mipsel-20240221-en
4 signatures
150 seconds
General
-
Target
479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf
-
Size
173KB
-
MD5
155c4648ec2814337d601bc57142b54b
-
SHA1
fd4ba315e2ec9913712e4a6dce08aab3b6c1b891
-
SHA256
479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9
-
SHA512
2c8f5f874fdb3fb63cc491f137a1063c868a78614b987938470fbaf23b60f0ae83e28156f5ce8701feb0dab03083f135de4eb52209275aaf80642922510c4fe7
-
SSDEEP
3072:nKpzGieNkSfcQqmav8SqaRVlnYz65oVt:nKYieNYQqmeqavlg65o
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 747 479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 747 479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf 750 479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 747 479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf 479f59386bb7ce53c4906d0dd1b0f249803e9850511d99af5d9c8e9d1258f5e9.elf