Analysis
- max time kernel
149s - max time network
151s - platform
debian-9_mips - resource
debian9-mipsbe-20260127-en - resource tags
arch:mipsimage:debian9-mipsbe-20260127-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
08/05/2026, 18:32
Behavioral task
behavioral1
Sample
micro.mips.elf
Resource
debian9-mipsbe-20260127-en
3 signatures
150 seconds
General
- Target micro.mips.elf
- Size 181KB
- Sample260508-w641esct7x
- SHA256 3e5e448c34a593f67e8970c8e103684d02021f580063e186eb98bbe05d483ff2
- MD5 69833e732a84d90ddbd7d44e2a8b2366
- SHA1 5c458764e53d577b9ece0330e0e72190cb268040
- SHA512 ff7a1bd9cd86246b36981ceb0acc2db4b3ff36438286ad9fbc44f5d81a29ac230a1ae23e0c18fa1407ea0c43c9832c29d545c99422e4b55824783f5f2fc9fb57
- SSDEEP 3072:5LFJxJ5z5B+CYAJV3+nAFtvJ9SnCRMbKsmLouqIM64:VFJxJ5tB+CzfXZJ2qMb8LmIM64
- TLSH T11904971E6E228F7DF6A9C73447B78E25975C23D627E1D644E1ACC2105E2038E641FFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog micro.mips.elf File opened for modification /dev/misc/watchdog micro.mips.elf - Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog micro.mips.elf File opened for modification /bin/watchdog micro.mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 717 micro.mips.elf