Analysis
-
max time kernel
0s -
max time network
36s -
platform
debian-9_mips -
resource
debian9-mipsbe-20240611-en -
resource tags
arch:mipsimage:debian9-mipsbe-20240611-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem -
submitted
09/03/2025, 15:07
Behavioral task
behavioral1
Sample
apep.mips.elf
Resource
debian9-mipsbe-20240611-en
3 signatures
150 seconds
General
-
Target
apep.mips.elf
-
Size
98KB
-
MD5
ef44394959f4a8c2d46123c8c007ff84
-
SHA1
67b134525b7ed73246610c4653d58501ea6ad65d
-
SHA256
351406f35e22011de3ba89e6523c03394a2426b98535ae32ed56265d4e6a8b56
-
SHA512
6b8eecf35a013fb12c18b2606e0b801074bdf66d5a506cdae37061efbf60e6259fd568f3a15024a4fc9455ab7fe4c8c755f0cd8e143406df036d5db4a67dd70c
-
SSDEEP
3072:jlLyCZxUAkmkgCKpEbFbsYaE6VT0/l8G/6eyYiLW:JGe5kgZieE6VT0/l8G/6jLW
Score
4/10
Malware Config
Signatures
-
Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself vxchqtb~cvbdz}c`x 699 apep.mips.elf -
System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 699 apep.mips.elf -
Writes file to tmp directory 4 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/=vwd=esfqzv}u apep.mips.elf File opened for modification /tmp/=vwd={aq=esfqzv}u apep.mips.elf File opened for modification /tmp/=vwd=TFEVF#"#Mesfqzv}u apep.mips.elf File opened for modification /tmp/=vwd=TFEVF#"#N2esfqzv}u apep.mips.elf