Analysis
-
max time kernel
151s -
max time network
153s -
platform
debian-12_mipsel -
resource
debian12-mipsel-20240221-en -
resource tags
arch:mipselimage:debian12-mipsel-20240221-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem -
submitted
09/03/2025, 02:22
Behavioral task
behavioral1
Sample
7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf
Resource
debian12-mipsel-20240221-en
4 signatures
150 seconds
General
-
Target
7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf
-
Size
173KB
-
MD5
308702394c207b5cfb5c5358a5ae4d5c
-
SHA1
039257b6cc0d621f79f80dc5d0fe57223618c594
-
SHA256
7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2
-
SHA512
27a5d63bc12c4702fedbe8ee75289a0595df481d7ffce1a4720a4244cb850fdad0baa891099fcd2ec8d50cd6356fe12976d1debc05b310a41f5ca3e13609150d
-
SSDEEP
3072:nKpzGZeNkSfcQqmav8SqaRVlnYz6521t:nKYZeNYQqmeqavlg652
Score
7/10
Malware Config
Signatures
-
Deletes itself 1 IoCs
pid Process 745 7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf -
Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 745 7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf 746 7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf -
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 745 7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf -
Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf 7bb22d623a88fe966041c3ce885300ff6670bc1522a488c99f7d37979da70af2.elf