Analysis
-
max time kernel
134s -
max time network
134s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
07/03/2025, 13:52
Behavioral task
behavioral1
Sample
blah.mips.elf
Resource
debian9-mipsbe-20240611-en
debian-9-mips
4 signatures
150 seconds
General
-
Target
blah.mips.elf
-
Size
58KB
-
MD5
1c8b6437a383e5816d7444525fc1508b
-
SHA1
4eefd8b14e3f7ac66a30f73b495b40839e5f6bb4
-
SHA256
1e74b70fafd03b372bd8f0b932ae682ab2ea7b73f69744dfc26e24385f23f569
-
SHA512
4acca052eece00944ceb143a6c898b4ce03061d4ad36598347128388ad5399431c0e989a2c7a6f2c1689e65ed34c25390d197492b6169ed1942cd928d331857c
-
SSDEEP
768:wp/qLBExCQZvS5rhmufbFNemSnoh2Ld3uAOW1cZSUqIfyMn+5vf4e/Jswb+D:wp/5lv4rNA1OW1pU5UQmJtS
Score
6/10
Malware Config
Signatures
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself a 688 blah.mips.elf -
description ioc Process File opened for reading /proc/10/cmdline blah.mips.elf File opened for reading /proc/11/cmdline blah.mips.elf File opened for reading /proc/116/cmdline blah.mips.elf File opened for reading /proc/381/cmdline blah.mips.elf File opened for reading /proc/759/cmdline blah.mips.elf File opened for reading /proc/5/cmdline blah.mips.elf File opened for reading /proc/6/cmdline blah.mips.elf File opened for reading /proc/7/cmdline blah.mips.elf File opened for reading /proc/23/cmdline blah.mips.elf File opened for reading /proc/71/cmdline blah.mips.elf File opened for reading /proc/243/cmdline blah.mips.elf File opened for reading /proc/330/cmdline blah.mips.elf File opened for reading /proc/331/cmdline blah.mips.elf File opened for reading /proc/3/cmdline blah.mips.elf File opened for reading /proc/24/cmdline blah.mips.elf File opened for reading /proc/150/cmdline blah.mips.elf File opened for reading /proc/69/cmdline blah.mips.elf File opened for reading /proc/74/cmdline blah.mips.elf File opened for reading /proc/657/cmdline blah.mips.elf File opened for reading /proc/679/cmdline blah.mips.elf File opened for reading /proc/751/cmdline blah.mips.elf File opened for reading /proc/18/cmdline blah.mips.elf File opened for reading /proc/37/cmdline blah.mips.elf File opened for reading /proc/70/cmdline blah.mips.elf File opened for reading /proc/9/cmdline blah.mips.elf File opened for reading /proc/15/cmdline blah.mips.elf File opened for reading /proc/20/cmdline blah.mips.elf File opened for reading /proc/36/cmdline blah.mips.elf File opened for reading /proc/380/cmdline blah.mips.elf File opened for reading /proc/13/cmdline blah.mips.elf File opened for reading /proc/334/cmdline blah.mips.elf File opened for reading /proc/16/cmdline blah.mips.elf File opened for reading /proc/17/cmdline blah.mips.elf File opened for reading /proc/77/cmdline blah.mips.elf File opened for reading /proc/83/cmdline blah.mips.elf File opened for reading /proc/703/cmdline blah.mips.elf File opened for reading /proc/4/cmdline blah.mips.elf File opened for reading /proc/12/cmdline blah.mips.elf File opened for reading /proc/73/cmdline blah.mips.elf File opened for reading /proc/79/cmdline blah.mips.elf File opened for reading /proc/81/cmdline blah.mips.elf File opened for reading /proc/105/cmdline blah.mips.elf File opened for reading /proc/115/cmdline blah.mips.elf File opened for reading /proc/685/cmdline blah.mips.elf File opened for reading /proc/328/cmdline blah.mips.elf File opened for reading /proc/656/cmdline blah.mips.elf File opened for reading /proc/684/cmdline blah.mips.elf File opened for reading /proc/747/cmdline blah.mips.elf File opened for reading /proc/72/cmdline blah.mips.elf File opened for reading /proc/336/cmdline blah.mips.elf File opened for reading /proc/664/cmdline blah.mips.elf File opened for reading /proc/22/cmdline blah.mips.elf File opened for reading /proc/340/cmdline blah.mips.elf File opened for reading /proc/663/cmdline blah.mips.elf File opened for reading /proc/391/cmdline blah.mips.elf File opened for reading /proc/1/cmdline blah.mips.elf File opened for reading /proc/2/cmdline blah.mips.elf File opened for reading /proc/8/cmdline blah.mips.elf File opened for reading /proc/14/cmdline blah.mips.elf File opened for reading /proc/75/cmdline blah.mips.elf File opened for reading /proc/145/cmdline blah.mips.elf File opened for reading /proc/366/cmdline blah.mips.elf File opened for reading /proc/21/cmdline blah.mips.elf File opened for reading /proc/680/cmdline blah.mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 688 blah.mips.elf