Analysis
- max time kernel
149s - max time network
151s - platform
debian-9_mips - resource
debian9-mipsbe-20260127-en - resource tags
- submitted
12/03/2026, 01:53
General
- Target sora.mips.elf
- Size 170KB
- Sample260312-ca533ad15v
- SHA256 ac5ec8e7ef682c556c05647745304864f7cb68f86d6460d1336757a62346ed76
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Writes file to system bin folder 2 IoCs
- Changes its process name 2 IoCs
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/sora.mips.elf/tmp/sora.mips.elf1⤵
- Modifies Watchdog functionality
- Writes file to system bin folder
- Changes its process name
- System Network Configuration Discovery
- Writes file to tmp directory