Analysis
- max time kernel
173s - max time network
175s - platform
debian-9_mips - resource
debian9-mipsbe-20260126-en - resource tags
arch:mipsimage:debian9-mipsbe-20260126-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
29/04/2026, 12:30
Static task
static1
Behavioral task
behavioral1
Sample
iran.mipsrouter
Resource
debian9-mipsbe-20260126-en
debian-9-mips
5 signatures
150 seconds
General
- Target iran.mipsrouter
- Size 197KB
- Sample260429-ppzaaaf12p
- SHA256 51be9be78882853c116b283e5ad0abcaf25abd648b5cbbc856c79cde48b816da
- MD5 9fe0e72ddf0a8cb55fda8d955511df9a
- SHA1 96e821f6ef12fc0ff42405586ffbefc0b33b5678
- SHA512 52ecbd80b4c5b1efe78d888b31b2cc71ae594faa07c1e4c7801d73111bb7721ee24921f2ff2aa44e339ee1d8ad17c416110d465f561cc1031b97df39fd0489fe
- SSDEEP 6144:456eQCbeoufx4Cdf2dp06GtCqjYW8nY1j20WI:Dely4Cdfap06GtCqjYW8nY1j20WI
- TLSH T15514C70A3A228FEFF56D877147F34A30976976D627E29684E26CD5101F103CD681FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 715 iran.mipsrouter - Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself t.me/flylegit 715 iran.mipsrouter -
description ioc Process File opened for reading /proc/4/comm iran.mipsrouter File opened for reading /proc/377/comm iran.mipsrouter File opened for reading /proc/710/comm iran.mipsrouter File opened for reading /proc/75/comm iran.mipsrouter File opened for reading /proc/355/comm iran.mipsrouter File opened for reading /proc/11/comm iran.mipsrouter File opened for reading /proc/71/comm iran.mipsrouter File opened for reading /proc/150/comm iran.mipsrouter File opened for reading /proc/708/comm iran.mipsrouter File opened for reading /proc/9/comm iran.mipsrouter File opened for reading /proc/74/comm iran.mipsrouter File opened for reading /proc/81/comm iran.mipsrouter File opened for reading /proc/322/comm iran.mipsrouter File opened for reading /proc/680/comm iran.mipsrouter File opened for reading /proc/20/comm iran.mipsrouter File opened for reading /proc/82/comm iran.mipsrouter File opened for reading /proc/5/comm iran.mipsrouter File opened for reading /proc/14/comm iran.mipsrouter File opened for reading /proc/24/comm iran.mipsrouter File opened for reading /proc/79/comm iran.mipsrouter File opened for reading /proc/244/comm iran.mipsrouter File opened for reading /proc/704/comm iran.mipsrouter File opened for reading /proc/711/comm iran.mipsrouter File opened for reading /proc/10/comm iran.mipsrouter File opened for reading /proc/12/comm iran.mipsrouter File opened for reading /proc/23/comm iran.mipsrouter File opened for reading /proc/118/comm iran.mipsrouter File opened for reading /proc/674/comm iran.mipsrouter File opened for reading /proc/709/comm iran.mipsrouter File opened for reading /proc/7/comm iran.mipsrouter File opened for reading /proc/17/comm iran.mipsrouter File opened for reading /proc/117/comm iran.mipsrouter File opened for reading /proc/417/comm iran.mipsrouter File opened for reading /proc/1/comm iran.mipsrouter File opened for reading /proc/22/comm iran.mipsrouter File opened for reading /proc/36/comm iran.mipsrouter File opened for reading /proc/37/comm iran.mipsrouter File opened for reading /proc/375/comm iran.mipsrouter File opened for reading /proc/681/comm iran.mipsrouter File opened for reading /proc/72/comm iran.mipsrouter File opened for reading /proc/76/comm iran.mipsrouter File opened for reading /proc/108/comm iran.mipsrouter File opened for reading /proc/145/comm iran.mipsrouter File opened for reading /proc/394/comm iran.mipsrouter File opened for reading /proc/21/comm iran.mipsrouter File opened for reading /proc/319/comm iran.mipsrouter File opened for reading /proc/325/comm iran.mipsrouter File opened for reading /proc/2/comm iran.mipsrouter File opened for reading /proc/6/comm iran.mipsrouter File opened for reading /proc/70/comm iran.mipsrouter File opened for reading /proc/167/comm iran.mipsrouter File opened for reading /proc/13/comm iran.mipsrouter File opened for reading /proc/15/comm iran.mipsrouter File opened for reading /proc/18/comm iran.mipsrouter File opened for reading /proc/19/comm iran.mipsrouter File opened for reading /proc/713/comm iran.mipsrouter File opened for reading /proc/73/comm iran.mipsrouter File opened for reading /proc/77/comm iran.mipsrouter File opened for reading /proc/671/comm iran.mipsrouter File opened for reading /proc/712/comm iran.mipsrouter File opened for reading /proc/3/comm iran.mipsrouter File opened for reading /proc/8/comm iran.mipsrouter File opened for reading /proc/16/comm iran.mipsrouter File opened for reading /proc/391/comm iran.mipsrouter - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 711 iran.mipsrouter