Analysis
- max time kernel
150s - max time network
144s - platform
debian-9_mips - resource
debian9-mipsbe-20260126-en - resource tags
arch:mipsimage:debian9-mipsbe-20260126-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
25/04/2026, 15:36
Static task
static1
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20260126-en
debian-9-mips
4 signatures
150 seconds
General
- Target mips.elf
- Size 692KB
- Sample260425-s193psew7m
- SHA256 f4d986f2f3149563dc3b81cff76a2e77a43af83e0aba794e64dcd2b30502d47b
- MD5 173cc7a647d85146da75e1e285f398f5
- SHA1 c64767a674fe3125887237b46ac317586e626bf5
- SHA512 0efe70f07a4a9c79c4303ac4fdd746e062598e99fdff9c954a925bab7533a9e49714c5cb2257745a68e058cc034c6644db29efe56cccaddedafa95a4274ed886
- SSDEEP 12288:/zBmL6EAFeR1lubTIRLAjEU/2D3wxI/BfGRFZEX:VmL6EAF0ubTpjEU/2jXAFM
- TLSH T1E8E4D50A6E729F3CF2A487314BF34B24D7AD62DA13F1C585E29CD1155E2024E592FBAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself init 723 mips.elf -
description ioc Process File opened for reading /proc/3/comm mips.elf File opened for reading /proc/72/status mips.elf File opened for reading /proc/672/status mips.elf File opened for reading /proc/762/exe mips.elf File opened for reading /proc/766/status mips.elf File opened for reading /proc/770/status mips.elf File opened for reading /proc/770/cmdline mips.elf File opened for reading /proc/5/status mips.elf File opened for reading /proc/10/status mips.elf File opened for reading /proc/694/exe mips.elf File opened for reading /proc/158/comm mips.elf File opened for reading /proc/689/comm mips.elf File opened for reading /proc/752/comm mips.elf File opened for reading /proc/778/comm mips.elf File opened for reading /proc/4/comm mips.elf File opened for reading /proc/12/comm mips.elf File opened for reading /proc/17/status mips.elf File opened for reading /proc/714/exe mips.elf File opened for reading /proc/764/cmdline mips.elf File opened for reading /proc/2/comm mips.elf File opened for reading /proc/11/comm mips.elf File opened for reading /proc/15/status mips.elf File opened for reading /proc/23/status mips.elf File opened for reading /proc/738/status mips.elf File opened for reading /proc/739/status mips.elf File opened for reading /proc/744/status mips.elf File opened for reading /proc/768/cmdline mips.elf File opened for reading /proc/13/status mips.elf File opened for reading /proc/346/comm mips.elf File opened for reading /proc/724/comm mips.elf File opened for reading /proc/776/exe mips.elf File opened for reading /proc/1/status mips.elf File opened for reading /proc/397/status mips.elf File opened for reading /proc/735/cmdline mips.elf File opened for reading /proc/6/comm mips.elf File opened for reading /proc/9/comm mips.elf File opened for reading /proc/394/comm mips.elf File opened for reading /proc/757/exe mips.elf File opened for reading /proc/763/status mips.elf File opened for reading /proc/24/status mips.elf File opened for reading /proc/70/status mips.elf File opened for reading /proc/743/comm mips.elf File opened for reading /proc/771/exe mips.elf File opened for reading /proc/248/comm mips.elf File opened for reading /proc/749/cmdline mips.elf File opened for reading /proc/735/status mips.elf File opened for reading /proc/175/exe mips.elf File opened for reading /proc/732/exe mips.elf File opened for reading /proc/741/comm mips.elf File opened for reading /proc/750/cmdline mips.elf File opened for reading /proc/762/comm mips.elf File opened for reading /proc/774/exe mips.elf File opened for reading /proc/777/cmdline mips.elf File opened for reading /proc/12/status mips.elf File opened for reading /proc/70/comm mips.elf File opened for reading /proc/688/status mips.elf File opened for reading /proc/713/exe mips.elf File opened for reading /proc/353/status mips.elf File opened for reading /proc/730/exe mips.elf File opened for reading /proc/775/cmdline mips.elf File opened for reading /proc/735/exe mips.elf File opened for reading /proc/744/comm mips.elf File opened for reading /proc/11/status mips.elf File opened for reading /proc/721/status mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 723 mips.elf