Analysis
- max time kernel
152s - max time network
157s - platform
debian-12_mipsel - resource
debian12-mipsel-20260127-en - resource tags
arch:mipselimage:debian12-mipsel-20260127-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
04/05/2026, 18:43
Static task
static1
Behavioral task
behavioral1
Sample
mipsel.elf
Resource
debian12-mipsel-20260127-en
debian-12-mipsel
5 signatures
150 seconds
General
- Target mipsel.elf
- Size 7.8MB
- Sample260504-xc6gtsax71
- SHA256 dbadb26a0536a859c76dfb9d36ecc8bbb36634af15f6f00d964c3211caa3e83a
- MD5 b128f029c452ce8e9c2944684ebc92c0
- SHA1 8f586a6afe40dce9bc64bbd14af85b71c0f41133
- SHA512 0f0c3af3870c7b68affdb23b811275bd6757bdba2ca52ab901557081948dde0dd1f3b1c8f16ae333646f3aeef81239020b579d1c09efe2ec6ffdb791ffc6ca05
- SSDEEP 49152:0lHmk+UCED+nU51wB0CQZ4HTBAV4CcIE17Il8ZkFcy5EB:eyLQZqlImDOFfEB
- TLSH T11C860905ACC53BE6C42C5E7444EACA6522B06D140AF2463A26A4FFE9BC772757F478CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /usr/lib/accountsservice/accounts-daemon 826 mipsel.elf - Enumerates kernel/hardware configuration 1 TTPs 2 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/agent.service/cpu.max mipsel.elf -
description ioc Process File opened for reading /proc/112/environ mipsel.elf File opened for reading /proc/15/stat mipsel.elf File opened for reading /proc/2/environ mipsel.elf File opened for reading /proc/24/environ mipsel.elf File opened for reading /proc/773/stat mipsel.elf File opened for reading /proc/32/stat mipsel.elf File opened for reading /proc/33/stat mipsel.elf File opened for reading /proc/19/environ mipsel.elf File opened for reading /proc/23/environ mipsel.elf File opened for reading /proc/823/stat mipsel.elf File opened for reading /proc/self/mountinfo mipsel.elf File opened for reading /proc/26/environ mipsel.elf File opened for reading /proc/47/environ mipsel.elf File opened for reading /proc/13/environ mipsel.elf File opened for reading /proc/59/stat mipsel.elf File opened for reading /proc/26/stat mipsel.elf File opened for reading /proc/5/environ mipsel.elf File opened for reading /proc/25/stat mipsel.elf File opened for reading /proc/31/environ mipsel.elf File opened for reading /proc/15/environ mipsel.elf File opened for reading /proc/11/environ mipsel.elf File opened for reading /proc/13/stat mipsel.elf File opened for reading /proc/16/stat mipsel.elf File opened for reading /proc/17/stat mipsel.elf File opened for reading /proc/35/stat mipsel.elf File opened for reading /proc/112/stat mipsel.elf File opened for reading /proc/12/environ mipsel.elf File opened for reading /proc/53/environ mipsel.elf File opened for reading /proc/58/stat mipsel.elf File opened for reading /proc/111/environ mipsel.elf File opened for reading /proc/196/stat mipsel.elf File opened for reading /proc/29/stat mipsel.elf File opened for reading /proc/35/environ mipsel.elf File opened for reading /proc/37/stat mipsel.elf File opened for reading /proc/44/environ mipsel.elf File opened for reading /proc/44/stat mipsel.elf File opened for reading /proc/53/stat mipsel.elf File opened for reading /proc/28/environ mipsel.elf File opened for reading /proc/30/environ mipsel.elf File opened for reading /proc/48/environ mipsel.elf File opened for reading /proc/59/environ mipsel.elf File opened for reading /proc/823/environ mipsel.elf File opened for reading /proc/792/environ mipsel.elf File opened for reading /proc/110/stat mipsel.elf File opened for reading /proc/42/stat mipsel.elf File opened for reading /proc/6/environ mipsel.elf File opened for reading /proc/136/stat mipsel.elf File opened for reading /proc/18/stat mipsel.elf File opened for reading /proc/22/stat mipsel.elf File opened for reading /proc/27/environ mipsel.elf File opened for reading /proc/33/environ mipsel.elf File opened for reading /proc/42/environ mipsel.elf File opened for reading /proc/110/environ mipsel.elf File opened for reading /proc/115/stat mipsel.elf File opened for reading /proc/136/environ mipsel.elf File opened for reading /proc/19/stat mipsel.elf File opened for reading /proc/23/stat mipsel.elf File opened for reading /proc/24/stat mipsel.elf File opened for reading /proc/34/stat mipsel.elf File opened for reading /proc/4/stat mipsel.elf File opened for reading /proc/137/stat mipsel.elf File opened for reading /proc/47/stat mipsel.elf File opened for reading /proc/48/stat mipsel.elf File opened for reading /proc/778/environ mipsel.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 802 mipsel.elf