Analysis
- max time kernel
149s - max time network
148s - platform
debian-9_mips - resource
debian9-mipsbe-20260127-en - resource tags
arch:mipsimage:debian9-mipsbe-20260127-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
05/04/2026, 14:32
Behavioral task
behavioral1
Sample
main_mips.elf
Resource
debian9-mipsbe-20260127-en
5 signatures
150 seconds
General
- Target main_mips.elf
- Size 178KB
- Sample260405-rwc2qset61
- SHA256 66abf3dbfda5ae2e424356a48b98701e8c08b18d164ba6b62b06f182eace4dbc
- MD5 c1d9889f1394630552c5648d35d2ef7e
- SHA1 1a45732cfad13304593ccc10863bd4fc7378271d
- SHA512 b0635b80060a861bf99320ef80d3dcbee5f0abab7ab7b7c0d4ef61a4e9c6c8476aeabf34a156f0737ab83216ad386094859e6db762fa0982ea01f40a914d0bac
- SSDEEP 1536:fmlcW4LXVVwIM6xBS//3FRQS/Z+aiuinlvfQ9IeilifVG9b4TXDHZWupLSG9Ai+:8D4LVo/VZ/ZauilvfQclifiE5WuNj+
- TLSH T1BE04A71E6F228F7DF668873147B78E25975C23DA26E1D680E1ACC1105E6039E641FFE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 713 main_mips.elf - Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 713 main_mips.elf 714 main_mips.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 713 main_mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 713 main_mips.elf - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mips.elf main_mips.elf