Analysis
- max time kernel
4s - max time network
122s - platform
debian-12_mipsel - resource
debian12-mipsel-20260126-en - resource tags
arch:mipselimage:debian12-mipsel-20260126-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
24/04/2026, 09:37
Static task
static1
Behavioral task
behavioral1
Sample
_ad62210247b2db0afdb832dcb618a391d769627fe79a5ff9cc87b614636de77b.elf
Resource
debian12-mipsel-20260126-en
3 signatures
150 seconds
General
- Target _ad62210247b2db0afdb832dcb618a391d769627fe79a5ff9cc87b614636de77b.elf
- Size 1.4MB
- Sample260424-llj5ead16x
- SHA256 ad62210247b2db0afdb832dcb618a391d769627fe79a5ff9cc87b614636de77b
- MD5 54ffec42c6685b422192311373d38854
- SHA1 475f899b5c9a8551223f67f90ffb0ed6f1ca1a49
- SHA512 72c7d0f9338a0d956d69568fba5b872e3e7b9a4063fc43b97be4326ff5d1abc435ad67cc47c717be5abf1035a6f7e22c8fa6a1110384e9bc42d28863bface3a5
- SSDEEP 24576:ZYnr5PrLsOf860KhwVfLeyxHivTtcUrIXVs4L167xXTtQYIvG5M79JDDhULh:ZIrLyrVTdivmPU7xDudLO9
- TLSH T1DF65C002FF405FABC4AFCD30492EC25B11EDD98256D1A62A71FC4B9CBA5C35A0BD7588
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself ksoftirqd/0 799 _ad62210247b2db0afdb832dcb618a391d769627fe79a5ff9cc87b614636de77b.elf -
description ioc Process File opened for reading /proc/self/exe _ad62210247b2db0afdb832dcb618a391d769627fe79a5ff9cc87b614636de77b.elf - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/.sys_lock _ad62210247b2db0afdb832dcb618a391d769627fe79a5ff9cc87b614636de77b.elf
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/.sys_lock
- Size 4B
- SHA256 292f9b09674069091f3cd5b7e1e36cb1322fcb6fa16595a5edb88f38edcd1c28
- MD5 b8bf5add56bb8fe6cbe4baf429a90c49
- SHA1 889b3bf5f6fd0adda2855a5fb998094d97492ac0
- SHA512 fa26cc0d050ddfae00abfa24a7faa86980f836421010fd5a0318463cd392f683744dda2893c7c92e9d103f37a20b1965bbdd23662a29bba02088df8242f48e57
- MD5 SHA1 SHA512