Analysis
- max time kernel
150s - max time network
148s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
06/09/2026, 18:00
Static task
static1
Behavioral task
behavioral1
Sample
c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
6 signatures
150 seconds
General
- Target c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf
- Size 283KB
- Sample260906-wlgdmaxvgs
- SHA256 c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b
- MD5 b66697c8121a1b31b76612a82529fe50
- SHA1 c960646e5550c37575684ec222d933f534b7fd80
- SHA512 6d9f049610ae70f1b90e0eba08d489f476871a86a89e4b7a2ed5b7ae4b42b26d1368188311223de57ea1c9e761792b2b1ef60b849b584323de118145c8341ca1
- SSDEEP 6144:JM8eiLP/g9GY2SLWsZcJc7sLnfMp0w9DH3:13g9GW1ILnfyv3
- TLSH T19A54B70E9F710EFBE8AFDE3302E90652298C6516229D3F363674D528F549A4F49D3C68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 799 c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf - Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for modification /dev/misc/watchdog c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf - Traces itself 1 IoCs
Traces itself to prevent debugging attempts
pid Process 799 c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself [net-worker] 806 c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf -
description ioc Process File opened for reading /proc/44/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/10/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/793/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/11/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/14/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/32/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/4/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/44/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/58/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/112/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/18/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/34/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/34/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/180/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/387/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/111/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/180/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/37/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/22/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/4/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/119/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/382/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/12/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/114/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/119/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/388/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/799/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/111/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/258/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/778/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/356/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/359/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/698/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/388/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/8/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/388/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/31/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/29/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/20/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/53/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/356/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/138/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/113/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/761/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/113/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/374/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/35/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/382/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/2/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/6/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/15/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/5/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/25/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/112/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/810/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/35/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/672/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/778/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/810/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/7/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/47/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/6/comm c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/416/cmdline c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf File opened for reading /proc/3/fd c07cc1803d7375bd9cd99096db4ed7b2abcb85f1beb142fb508bcf7d761b955b.elf