277247f3700a18de8fa4688c4bbeb370d94bd1e2af1b8e4330831a9cbca65b1b

Analysis

max time kernel
148s
max time network
154s
platform
debian-12_mipsel
resource
debian12-mipsel-20260127-en
resource tags

arch:mipselimage:debian12-mipsel-20260127-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
29/04/2026, 12:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bot.mipsel
Size 222KB
Sample260429-ppzaaaf13k
SHA256 277247f3700a18de8fa4688c4bbeb370d94bd1e2af1b8e4330831a9cbca65b1b
MD5 84dd5d786d05793c1f04bfc81f1fea87
SHA1 08eb529e6d827e0e8222ebeea012446538225a68
SHA512 c83c5c4c0c2323f3c76e2c163ac0bf2a52b405118d130fba921a9732eebd92d8fcd2e1d0532245df21e32aae06b1120f846815ac01529be25d24446ae90d5eae
SSDEEP 3072:+kkyo8Jbqa7jlSLUOdIwYDuWCP3moz9nzBsNcPUTkFizT:hkKP75zO+wYi13moz9nzBsNcPUTkFizT
TLSH
T19924E7076BA19EF7C89BCD3302EA860120CEF05722956B6B7378D65CBB4A94F49D3C54
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
805	bot.mipsel

/tmp/bot.mipsel
/tmp/bot.mipsel
1⤵
- System Network Configuration Discovery
PID:805
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:835
- - /usr/bin/uname
    uname -m
    3⤵
    PID:837
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:840
- - /usr/bin/uname
    uname -m
    3⤵
    PID:841
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:842
- - /usr/bin/uname
    uname -m
    3⤵
    PID:843
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:844
- - /usr/bin/uname
    uname -m
    3⤵
    PID:845
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:848
- - /usr/bin/uname
    uname -m
    3⤵
    PID:849
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:850
- - /usr/bin/uname
    uname -m
    3⤵
    PID:851
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:852
- - /usr/bin/uname
    uname -m
    3⤵
    PID:853
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:854
- - /usr/bin/uname
    uname -m
    3⤵
    PID:855
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:856
- - /usr/bin/uname
    uname -m
    3⤵
    PID:857
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:858
- - /usr/bin/uname
    uname -m
    3⤵
    PID:859
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:860
- - /usr/bin/uname
    uname -m
    3⤵
    PID:861
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:862
- - /usr/bin/uname
    uname -m
    3⤵
    PID:863
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:864
- - /usr/bin/uname
    uname -m
    3⤵
    PID:865
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:866
- - /usr/bin/uname
    uname -m
    3⤵
    PID:867
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:868
- - /usr/bin/uname
    uname -m
    3⤵
    PID:869
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:870
- - /usr/bin/uname
    uname -m
    3⤵
    PID:871
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:872
- - /usr/bin/uname
    uname -m
    3⤵
    PID:873
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:874
- - /usr/bin/uname
    uname -m
    3⤵
    PID:875
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:876
- - /usr/bin/uname
    uname -m
    3⤵
    PID:877
- /bin/sh
  sh -c "uname -m"
  2⤵
  PID:879
- - /usr/bin/uname
    uname -m
    3⤵
    PID:880

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads