Analysis
- max time kernel
138s - max time network
150s - platform
debian-12_mipsel - resource
debian12-mipsel-20260126-en - resource tags
arch:mipselimage:debian12-mipsel-20260126-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
15/04/2026, 12:28
Static task
static1
Behavioral task
behavioral1
Sample
iran.mipsel
Resource
debian12-mipsel-20260126-en
debian-12-mipsel
5 signatures
150 seconds
General
- Target iran.mipsel
- Size 153KB
- Sample260415-pnj4zagy6v
- SHA256 bb8ae922e4436d0f332bdc6e57c3455d6925403b17f6e0a2f1c503141904d077
- MD5 d4595abe30c8e9833f681e531369bdbb
- SHA1 cd88cd1be0dc9fefa119a8997c2f2c9961721a34
- SHA512 f17f583f7f9013f8601e9264a26cfd773733caecd8bbe7909a8c45b1da5ed219af6c47fd38c2c277f434c1434007ae8a2a40d5c5dabc8d5400e4ea66c6dc2dd0
- SSDEEP 3072:axjJw1Cc/0s6YAPwenUr48pzfR+JonZy:axlw1xAop0YfRZ
- TLSH T19EE3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 802 iran.mipsel - Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself t.me/flylegit 802 iran.mipsel -
description ioc Process File opened for reading /proc/14/comm iran.mipsel File opened for reading /proc/16/comm iran.mipsel File opened for reading /proc/19/comm iran.mipsel File opened for reading /proc/25/comm iran.mipsel File opened for reading /proc/28/comm iran.mipsel File opened for reading /proc/33/comm iran.mipsel File opened for reading /proc/390/comm iran.mipsel File opened for reading /proc/662/comm iran.mipsel File opened for reading /proc/12/comm iran.mipsel File opened for reading /proc/30/comm iran.mipsel File opened for reading /proc/47/comm iran.mipsel File opened for reading /proc/111/comm iran.mipsel File opened for reading /proc/114/comm iran.mipsel File opened for reading /proc/677/comm iran.mipsel File opened for reading /proc/772/comm iran.mipsel File opened for reading /proc/798/comm iran.mipsel File opened for reading /proc/9/comm iran.mipsel File opened for reading /proc/26/comm iran.mipsel File opened for reading /proc/373/comm iran.mipsel File opened for reading /proc/8/comm iran.mipsel File opened for reading /proc/22/comm iran.mipsel File opened for reading /proc/24/comm iran.mipsel File opened for reading /proc/58/comm iran.mipsel File opened for reading /proc/113/comm iran.mipsel File opened for reading /proc/118/comm iran.mipsel File opened for reading /proc/372/comm iran.mipsel File opened for reading /proc/699/comm iran.mipsel File opened for reading /proc/764/comm iran.mipsel File opened for reading /proc/795/comm iran.mipsel File opened for reading /proc/799/comm iran.mipsel File opened for reading /proc/5/comm iran.mipsel File opened for reading /proc/6/comm iran.mipsel File opened for reading /proc/23/comm iran.mipsel File opened for reading /proc/27/comm iran.mipsel File opened for reading /proc/34/comm iran.mipsel File opened for reading /proc/37/comm iran.mipsel File opened for reading /proc/42/comm iran.mipsel File opened for reading /proc/44/comm iran.mipsel File opened for reading /proc/13/comm iran.mipsel File opened for reading /proc/31/comm iran.mipsel File opened for reading /proc/48/comm iran.mipsel File opened for reading /proc/239/comm iran.mipsel File opened for reading /proc/20/comm iran.mipsel File opened for reading /proc/179/comm iran.mipsel File opened for reading /proc/362/comm iran.mipsel File opened for reading /proc/664/comm iran.mipsel File opened for reading /proc/791/comm iran.mipsel File opened for reading /proc/792/comm iran.mipsel File opened for reading /proc/7/comm iran.mipsel File opened for reading /proc/59/comm iran.mipsel File opened for reading /proc/387/comm iran.mipsel File opened for reading /proc/11/comm iran.mipsel File opened for reading /proc/18/comm iran.mipsel File opened for reading /proc/136/comm iran.mipsel File opened for reading /proc/369/comm iran.mipsel File opened for reading /proc/777/comm iran.mipsel File opened for reading /proc/201/comm iran.mipsel File opened for reading /proc/391/comm iran.mipsel File opened for reading /proc/10/comm iran.mipsel File opened for reading /proc/53/comm iran.mipsel File opened for reading /proc/761/comm iran.mipsel File opened for reading /proc/762/comm iran.mipsel File opened for reading /proc/1/comm iran.mipsel File opened for reading /proc/21/comm iran.mipsel - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 798 iran.mipsel