General
- Target rrrdsl.elf
- Size 205KB
- Sample250326-1713datyay
- SHA256 2ad3fef075eb7eb5f5c91e47c160fb83f2d83128ffc4aab944c42bb3c122fbba
- MD5 b6bdf85d33db1b1190950a3de090494b
- SHA1 34e146e4d35bac9aa9bae83020ce7a726ef347ab
- SHA512 0cbe8382a73a13a20cd335aea4a736418f790a3f234963950e16d24ba90bfc12483223deeabcb69f8a966b256c53f46480409e87bff2e60705758e2084347864
- SSDEEP 3072:6pxl2xancOOWmCAhDMhf+o9qsfPcqAoPcOxAIht:6pxl0anLOW5WK+o5flpPcgB
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
rrrdsl.elf
Resource
debian9-mipsel-20240611-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target rrrdsl.elf
- Size 205KB
- SHA256 2ad3fef075eb7eb5f5c91e47c160fb83f2d83128ffc4aab944c42bb3c122fbba
- MD5 b6bdf85d33db1b1190950a3de090494b
- SHA1 34e146e4d35bac9aa9bae83020ce7a726ef347ab
- SHA512 0cbe8382a73a13a20cd335aea4a736418f790a3f234963950e16d24ba90bfc12483223deeabcb69f8a966b256c53f46480409e87bff2e60705758e2084347864
- SSDEEP 3072:6pxl2xancOOWmCAhDMhf+o9qsfPcqAoPcOxAIht:6pxl0anLOW5WK+o5flpPcgB
- MD5 SHA1 SHA512 SSDEEP
Score7/10-
Deletes itself
-
Enumerates running processes
Discovers information about currently running processes on the system
-
Reads process memory
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.