Analysis
- max time kernel
149s - max time network
150s - platform
debian-9_mips - resource
debian9-mipsbe-20250619-en - resource tags
arch:mipsimage:debian9-mipsbe-20250619-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
04/11/2025, 15:21
Behavioral task
behavioral1
Sample
1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin
Resource
debian9-mipsbe-20250619-en
debian-9-mips
2 signatures
150 seconds
General
- Target 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin
- Size 168KB
- Sample251104-sra71strfy
- SHA256 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e
- MD5 d3642907df719e5911272bd622150060
- SHA1 5e63c0f48fbf5e99c395b2ab4590b8c4b831bb11
- SHA512 e38b0fbc73c0953abdc5d6108cee6b6239ca5559e30700028a218b7a8a8a8918a9ad49d04b4df49697da5b8e1af7ba2f64794a60a04944625ba5bba5180581ed
- SSDEEP 3072:ltZ4+IQeKoYxpfk0mPJELUsvZNIs0qU6m8oiKX3IlJ:UQKELQqU6m8oiI3gJ
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
-
description ioc Process File opened for reading /proc/23/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/81/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/349/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/384/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/7/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/72/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/127/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/708/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/11/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/12/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/17/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/160/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/374/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/713/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/3/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/24/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/74/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/78/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/347/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/self/maps 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/2/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/16/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/68/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/75/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/156/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/5/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/21/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/37/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/175/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/351/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/706/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/712/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/18/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/69/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/70/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/671/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/10/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/82/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/260/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/711/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/73/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/716/exe 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/15/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/116/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/8/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/355/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/422/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/705/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/714/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/9/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/20/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/22/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/353/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/680/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/19/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/126/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/249/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/1/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/36/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/388/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/675/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/681/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/710/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin File opened for reading /proc/4/cmdline 1e31cdaaf9733b84f82872050d797673376caca992b95416483d7153198e279e.bin