273fa53f3311a6efa02d584d7ce920d4cfffd848dafb075e2df3157ea1d04287

Analysis

max time kernel
148s
max time network
150s
platform
debian-9_mips
resource
debian9-mipsbe-20250619-en
resource tags

arch:mipsimage:debian9-mipsbe-20250619-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
09/05/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mips
Size 292KB
Sample260509-wtbhcabv91
SHA256 273fa53f3311a6efa02d584d7ce920d4cfffd848dafb075e2df3157ea1d04287
MD5 ec17b9fbb1911e9d2e095f69da6d7c33
SHA1 27ec9138ef170130c8da3e25bbe8d22eb55c38a5
SHA512 98fd83c5e7ffb01d5ef7688fa7529b1ed73f2649953190ea92decceee0628aecd06fe507fd2afb6b843e7415c179e5dd6f1e9ef2c3e3b8f002810f8132182703
SSDEEP 6144:7j7xkeCaXWJ4tgClKnHtFFLyntGRabhy05+3LNE4G9BM78jBjoe4:7HBXWJ6bYtFFmntGRabw3RMy6jq
TLSH
T1AB5423FE1C6207EBC7689FF3B52A7254A28013C7018D458E5B6AD9B0F547326C854FAB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	efhm454n2f0b2c0e2o	726	mips

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/exe	mips

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
724	mips

/tmp/mips
/tmp/mips
1⤵
- Changes its process name
- Reads runtime system information
- System Network Configuration Discovery
PID:724

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

.netmon.lock

Path /run/.system-utils/.netmon.lock
Size 4B
SHA256 0906e8951d93b2c6f94c7158b38236255bcbd8c886e3aa797c14b3c86492d0b1
MD5 b3b012a2d7e8a72352211c6852c48fbf
SHA1 b11c378875c5bb0120c566e9660a2134842d424b
SHA512 bc825572ee8963f6a3770aaa41904cae20e389a595011a44e97a325119cb08299b09c41ee83cd81f2b33ef5981344ad8a1fd03bc08b7e79276a043bbbaa604d4
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads