Analysis
- max time kernel
125s - max time network
132s - platform
debian-12_mipsel - resource
debian12-mipsel-20250619-en - resource tags
arch:mipselimage:debian12-mipsel-20250619-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
11/05/2026, 19:09
Static task
static1
Behavioral task
behavioral1
Sample
iran.mipsel.elf
Resource
debian12-mipsel-20250619-en
debian-12-mipsel
5 signatures
150 seconds
General
- Target iran.mipsel.elf
- Size 153KB
- Sample260511-xt4dssgy8s
- SHA256 6410023c5ae885df3cff94afcee426b2858effcd356da6631a411923fe4f04ec
- MD5 3fab39de58b6a6a4c8d8ada18c8fbeb4
- SHA1 ffbdc9009f734432d958b8ae27dbe5704f6d1534
- SHA512 a43b76099b2c748681c2750ca6891a7b3a172fb395249d202319fc8ddef421420c724130f20e81d6dc09c4b6b97f0cec973a03d765a3093ce5ea662e6b944a1b
- SSDEEP 3072:1xjJw1Cc/0s6YAPwenUr48pzfR+JonCy:1xlw1xAop0YfRC
- TLSH T16FE3B71A9F910EFBDC6FDD3302A9060635CC954722A43B763674D528F64AA4F4AE3C6C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 798 iran.mipsel.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself t.me/flylegit 798 iran.mipsel.elf -
description ioc Process File opened for reading /proc/26/comm iran.mipsel.elf File opened for reading /proc/403/comm iran.mipsel.elf File opened for reading /proc/404/comm iran.mipsel.elf File opened for reading /proc/762/comm iran.mipsel.elf File opened for reading /proc/8/comm iran.mipsel.elf File opened for reading /proc/13/comm iran.mipsel.elf File opened for reading /proc/59/comm iran.mipsel.elf File opened for reading /proc/114/comm iran.mipsel.elf File opened for reading /proc/32/comm iran.mipsel.elf File opened for reading /proc/33/comm iran.mipsel.elf File opened for reading /proc/42/comm iran.mipsel.elf File opened for reading /proc/431/comm iran.mipsel.elf File opened for reading /proc/678/comm iran.mipsel.elf File opened for reading /proc/2/comm iran.mipsel.elf File opened for reading /proc/47/comm iran.mipsel.elf File opened for reading /proc/112/comm iran.mipsel.elf File opened for reading /proc/765/comm iran.mipsel.elf File opened for reading /proc/776/comm iran.mipsel.elf File opened for reading /proc/5/comm iran.mipsel.elf File opened for reading /proc/11/comm iran.mipsel.elf File opened for reading /proc/58/comm iran.mipsel.elf File opened for reading /proc/202/comm iran.mipsel.elf File opened for reading /proc/677/comm iran.mipsel.elf File opened for reading /proc/796/comm iran.mipsel.elf File opened for reading /proc/24/comm iran.mipsel.elf File opened for reading /proc/53/comm iran.mipsel.elf File opened for reading /proc/136/comm iran.mipsel.elf File opened for reading /proc/699/comm iran.mipsel.elf File opened for reading /proc/795/comm iran.mipsel.elf File opened for reading /proc/16/comm iran.mipsel.elf File opened for reading /proc/17/comm iran.mipsel.elf File opened for reading /proc/34/comm iran.mipsel.elf File opened for reading /proc/379/comm iran.mipsel.elf File opened for reading /proc/380/comm iran.mipsel.elf File opened for reading /proc/354/comm iran.mipsel.elf File opened for reading /proc/31/comm iran.mipsel.elf File opened for reading /proc/37/comm iran.mipsel.elf File opened for reading /proc/118/comm iran.mipsel.elf File opened for reading /proc/186/comm iran.mipsel.elf File opened for reading /proc/755/comm iran.mipsel.elf File opened for reading /proc/14/comm iran.mipsel.elf File opened for reading /proc/19/comm iran.mipsel.elf File opened for reading /proc/25/comm iran.mipsel.elf File opened for reading /proc/377/comm iran.mipsel.elf File opened for reading /proc/391/comm iran.mipsel.elf File opened for reading /proc/780/comm iran.mipsel.elf File opened for reading /proc/785/comm iran.mipsel.elf File opened for reading /proc/790/comm iran.mipsel.elf File opened for reading /proc/3/comm iran.mipsel.elf File opened for reading /proc/7/comm iran.mipsel.elf File opened for reading /proc/12/comm iran.mipsel.elf File opened for reading /proc/113/comm iran.mipsel.elf File opened for reading /proc/387/comm iran.mipsel.elf File opened for reading /proc/1/comm iran.mipsel.elf File opened for reading /proc/4/comm iran.mipsel.elf File opened for reading /proc/29/comm iran.mipsel.elf File opened for reading /proc/48/comm iran.mipsel.elf File opened for reading /proc/178/comm iran.mipsel.elf File opened for reading /proc/705/comm iran.mipsel.elf File opened for reading /proc/9/comm iran.mipsel.elf File opened for reading /proc/28/comm iran.mipsel.elf File opened for reading /proc/115/comm iran.mipsel.elf File opened for reading /proc/663/comm iran.mipsel.elf File opened for reading /proc/20/comm iran.mipsel.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 795 iran.mipsel.elf