Analysis
- max time kernel
7s - max time network
151s - platform
debian-9_mips - resource
debian9-mipsbe-20260126-en - resource tags
arch:mipsimage:debian9-mipsbe-20260126-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
13/04/2026, 04:14
Static task
static1
Behavioral task
behavioral1
Sample
iran.mips.elf
Resource
debian9-mipsbe-20260126-en
debian-9-mips
5 signatures
150 seconds
General
- Target iran.mips.elf
- Size 153KB
- Sample260413-ets9qaev81
- SHA256 e2921a6fb1258148ada9930f40df18bf4a94dba92003069ec1a7c69ff2da8bd6
- MD5 6ed031cfa668cf28c243e35b38bb66be
- SHA1 624ce829c5fc9e2e9de5d8c0826fb2c7c8762780
- SHA512 c36d7fc2f55965e90e7b498857140fbff18e5ecb0d7253f334a340082c494e300d6d128747779ffdbc0321f7512770776256649dc6fd68dcc38e7965941c12f0
- SSDEEP 3072:3O+qDHvC6+S0OUI425eNjZKcwumdEBfEVy:3Sfz0zIcNYcwumdKfEVy
- TLSH T1F8E3885A6E228FAEF67C873547F74A20976D23D623E1D684D2ACC1141F6038E541FBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 714 iran.mips.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself t.me/flylegit 714 iran.mips.elf -
description ioc Process File opened for reading /proc/23/comm iran.mips.elf File opened for reading /proc/4/comm iran.mips.elf File opened for reading /proc/5/comm iran.mips.elf File opened for reading /proc/12/comm iran.mips.elf File opened for reading /proc/17/comm iran.mips.elf File opened for reading /proc/72/comm iran.mips.elf File opened for reading /proc/111/comm iran.mips.elf File opened for reading /proc/124/comm iran.mips.elf File opened for reading /proc/384/comm iran.mips.elf File opened for reading /proc/334/comm iran.mips.elf File opened for reading /proc/685/comm iran.mips.elf File opened for reading /proc/701/comm iran.mips.elf File opened for reading /proc/702/comm iran.mips.elf File opened for reading /proc/21/comm iran.mips.elf File opened for reading /proc/379/comm iran.mips.elf File opened for reading /proc/13/comm iran.mips.elf File opened for reading /proc/22/comm iran.mips.elf File opened for reading /proc/6/comm iran.mips.elf File opened for reading /proc/18/comm iran.mips.elf File opened for reading /proc/2/comm iran.mips.elf File opened for reading /proc/8/comm iran.mips.elf File opened for reading /proc/80/comm iran.mips.elf File opened for reading /proc/81/comm iran.mips.elf File opened for reading /proc/158/comm iran.mips.elf File opened for reading /proc/11/comm iran.mips.elf File opened for reading /proc/19/comm iran.mips.elf File opened for reading /proc/364/comm iran.mips.elf File opened for reading /proc/432/comm iran.mips.elf File opened for reading /proc/70/comm iran.mips.elf File opened for reading /proc/125/comm iran.mips.elf File opened for reading /proc/363/comm iran.mips.elf File opened for reading /proc/71/comm iran.mips.elf File opened for reading /proc/73/comm iran.mips.elf File opened for reading /proc/254/comm iran.mips.elf File opened for reading /proc/358/comm iran.mips.elf File opened for reading /proc/707/comm iran.mips.elf File opened for reading /proc/10/comm iran.mips.elf File opened for reading /proc/15/comm iran.mips.elf File opened for reading /proc/24/comm iran.mips.elf File opened for reading /proc/75/comm iran.mips.elf File opened for reading /proc/152/comm iran.mips.elf File opened for reading /proc/381/comm iran.mips.elf File opened for reading /proc/711/comm iran.mips.elf File opened for reading /proc/79/comm iran.mips.elf File opened for reading /proc/361/comm iran.mips.elf File opened for reading /proc/676/comm iran.mips.elf File opened for reading /proc/708/comm iran.mips.elf File opened for reading /proc/3/comm iran.mips.elf File opened for reading /proc/74/comm iran.mips.elf File opened for reading /proc/83/comm iran.mips.elf File opened for reading /proc/36/comm iran.mips.elf File opened for reading /proc/14/comm iran.mips.elf File opened for reading /proc/16/comm iran.mips.elf File opened for reading /proc/1/comm iran.mips.elf File opened for reading /proc/7/comm iran.mips.elf File opened for reading /proc/20/comm iran.mips.elf File opened for reading /proc/77/comm iran.mips.elf File opened for reading /proc/172/comm iran.mips.elf File opened for reading /proc/710/comm iran.mips.elf File opened for reading /proc/9/comm iran.mips.elf File opened for reading /proc/76/comm iran.mips.elf File opened for reading /proc/659/comm iran.mips.elf File opened for reading /proc/678/comm iran.mips.elf File opened for reading /proc/712/comm iran.mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 711 iran.mips.elf