71bb0cb1b7ebefff0433ac36de167d00d0ee19578bbe0316f8c10734c56fd014

Analysis

max time kernel
150s
max time network
152s
platform
debian-9_mips
resource
debian9-mipsbe-20260126-en
resource tags

arch:mipsimage:debian9-mipsbe-20260126-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
18/04/2026, 15:38

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
FBI.mips.elf
Size 144KB
Sample260418-s263facv6q
SHA256 71bb0cb1b7ebefff0433ac36de167d00d0ee19578bbe0316f8c10734c56fd014
MD5 c15e1e5c19a3f351ee1530625b677de1
SHA1 c28f624908d22b23ec4716ffaa719e37f867c599
SHA512 c18a0e89fdcd93dce26c85f209b692bf01a8ab160edb9920ae956e167380d11eff13365dbb0fac3d13bc4ff36bcd156392ccdf0ff4fdaf2eb6278299e631e6f6
SSDEEP 3072:i7qBY8ikREm96cPXqF9udnUawzlb6jHkkG2AgK6KM5hspZH:i7qJikREm96cPXqF9udHGW7hSD6N5hWH
TLSH
T179E3971E7E21DF6EF559833047B38E30969836E636E18585F26CE6481E7138E241FBE4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Writes DNS configuration 1 TTPs 1 IoCs

Writes data to DNS resolver config file.

Adversary-in-the-Middle

T1557

description	ioc	Process
File opened for modification	/etc/resolv.conf	FBI.mips.elf

Changes its process name 4 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	daddyl33t's back	715	FBI.mips.elf
Changes the process name, possibly in an attempt to hide itself		715	FBI.mips.elf
Changes the process name, possibly in an attempt to hide itself		718	FBI.mips.elf
Changes the process name, possibly in an attempt to hide itself		717	FBI.mips.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
715	FBI.mips.elf

/tmp/FBI.mips.elf
/tmp/FBI.mips.elf
1⤵
- Writes DNS configuration
- Changes its process name
- System Network Configuration Discovery
PID:715

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Adversary-in-the-Middle

T1557

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Adversary-in-the-Middle

T1557

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads