Analysis
- max time kernel
172s - max time network
170s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
15/05/2026, 17:13
Static task
static1
Behavioral task
behavioral1
Sample
proxy.mips-11.elf
Resource
debian9-mipsbe-20260513-en
debian-9-mips
7 signatures
150 seconds
General
- Target proxy.mips-11.elf
- Size 132KB
- Sample260515-vrnt8adt71
- SHA256 9ba674bc9971bf9f14c0fd555fdef4b38c7b5cd22ed5307be09b467d050adc98
- MD5 47e7a9e4e07b6ecedbbb28925fa4dd1e
- SHA1 3c2c3b2f3c6d79dab3a72b9abd02e0fcdf7a7678
- SHA512 fc627a231122d2537a3384bed8aa880a0757d0c403592293b363fc619e25f496d0fe67707e05cda6aa6c9444086ac4a27f0445c993cd191a419d8d58b3ee071d
- SSDEEP 1536:F8xQYaxTwc0uaIvCfAYcfQ11Ci65NyHE6izVNQKaYNg55ERYqp1IeHfA0GZRG/Vh:kc0JIMq498MqNjtNDjHKXwCmlLh
- TLSH T1EBD3543E7E21AF6EE678823007F76E70D35926D636E19640F16CD7085EB428C189F7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 703 proxy.mips-11.elf - Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog proxy.mips-11.elf File opened for modification /dev/misc/watchdog proxy.mips-11.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Reads process memory 1 TTPs 45 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
description ioc Process File opened for reading /proc/76/maps proxy.mips-11.elf File opened for reading /proc/115/maps proxy.mips-11.elf File opened for reading /proc/19/maps proxy.mips-11.elf File opened for reading /proc/698/maps proxy.mips-11.elf File opened for reading /proc/37/maps proxy.mips-11.elf File opened for reading /proc/15/maps proxy.mips-11.elf File opened for reading /proc/4/maps proxy.mips-11.elf File opened for reading /proc/9/maps proxy.mips-11.elf File opened for reading /proc/10/maps proxy.mips-11.elf File opened for reading /proc/12/maps proxy.mips-11.elf File opened for reading /proc/22/maps proxy.mips-11.elf File opened for reading /proc/23/maps proxy.mips-11.elf File opened for reading /proc/6/maps proxy.mips-11.elf File opened for reading /proc/21/maps proxy.mips-11.elf File opened for reading /proc/75/maps proxy.mips-11.elf File opened for reading /proc/77/maps proxy.mips-11.elf File opened for reading /proc/82/maps proxy.mips-11.elf File opened for reading /proc/5/maps proxy.mips-11.elf File opened for reading /proc/13/maps proxy.mips-11.elf File opened for reading /proc/16/maps proxy.mips-11.elf File opened for reading /proc/17/maps proxy.mips-11.elf File opened for reading /proc/20/maps proxy.mips-11.elf File opened for reading /proc/24/maps proxy.mips-11.elf File opened for reading /proc/71/maps proxy.mips-11.elf File opened for reading /proc/80/maps proxy.mips-11.elf File opened for reading /proc/7/maps proxy.mips-11.elf File opened for reading /proc/8/maps proxy.mips-11.elf File opened for reading /proc/36/maps proxy.mips-11.elf File opened for reading /proc/105/maps proxy.mips-11.elf File opened for reading /proc/149/maps proxy.mips-11.elf File opened for reading /proc/699/maps proxy.mips-11.elf File opened for reading /proc/701/maps proxy.mips-11.elf File opened for reading /proc/70/maps proxy.mips-11.elf File opened for reading /proc/2/maps proxy.mips-11.elf File opened for reading /proc/74/maps proxy.mips-11.elf File opened for reading /proc/116/maps proxy.mips-11.elf File opened for reading /proc/177/maps proxy.mips-11.elf File opened for reading /proc/3/maps proxy.mips-11.elf File opened for reading /proc/18/maps proxy.mips-11.elf File opened for reading /proc/72/maps proxy.mips-11.elf File opened for reading /proc/73/maps proxy.mips-11.elf File opened for reading /proc/78/maps proxy.mips-11.elf File opened for reading /proc/894/maps proxy.mips-11.elf File opened for reading /proc/14/maps proxy.mips-11.elf File opened for reading /proc/11/maps proxy.mips-11.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself uucp 703 proxy.mips-11.elf -
description ioc Process File opened for reading /proc/883/comm proxy.mips-11.elf File opened for reading /proc/7/comm proxy.mips-11.elf File opened for reading /proc/729/comm proxy.mips-11.elf File opened for reading /proc/830/comm proxy.mips-11.elf File opened for reading /proc/838/comm proxy.mips-11.elf File opened for reading /proc/875/comm proxy.mips-11.elf File opened for reading /proc/233/net/tcp proxy.mips-11.elf File opened for reading /proc/812/net/tcp proxy.mips-11.elf File opened for reading /proc/4/comm proxy.mips-11.elf File opened for reading /proc/15/comm proxy.mips-11.elf File opened for reading /proc/10/comm proxy.mips-11.elf File opened for reading /proc/71/comm proxy.mips-11.elf File opened for reading /proc/729/net/tcp proxy.mips-11.elf File opened for reading /proc/660/net/tcp proxy.mips-11.elf File opened for reading /proc/719/net/tcp proxy.mips-11.elf File opened for reading /proc/701/comm proxy.mips-11.elf File opened for reading /proc/872/comm proxy.mips-11.elf File opened for reading /proc/self/exe proxy.mips-11.elf File opened for reading /proc/818/net/tcp proxy.mips-11.elf File opened for reading /proc/861/comm proxy.mips-11.elf File opened for reading /proc/877/net/tcp proxy.mips-11.elf File opened for reading /proc/378/comm proxy.mips-11.elf File opened for reading /proc/822/comm proxy.mips-11.elf File opened for reading /proc/829/net/tcp proxy.mips-11.elf File opened for reading /proc/868/net/tcp proxy.mips-11.elf File opened for reading /proc/664/net/tcp proxy.mips-11.elf File opened for reading /proc/13/comm proxy.mips-11.elf File opened for reading /proc/80/comm proxy.mips-11.elf File opened for reading /proc/105/comm proxy.mips-11.elf File opened for reading /proc/424/comm proxy.mips-11.elf File opened for reading /proc/820/net/tcp proxy.mips-11.elf File opened for reading /proc/11/comm proxy.mips-11.elf File opened for reading /proc/860/net/tcp proxy.mips-11.elf File opened for reading /proc/19/comm proxy.mips-11.elf File opened for reading /proc/72/comm proxy.mips-11.elf File opened for reading /proc/76/comm proxy.mips-11.elf File opened for reading /proc/115/comm proxy.mips-11.elf File opened for reading /proc/670/comm proxy.mips-11.elf File opened for reading /proc/857/net/tcp proxy.mips-11.elf File opened for reading /proc/24/comm proxy.mips-11.elf File opened for reading /proc/835/net/tcp proxy.mips-11.elf File opened for reading /proc/828/comm proxy.mips-11.elf File opened for reading /proc/5/comm proxy.mips-11.elf File opened for reading /proc/835/comm proxy.mips-11.elf File opened for reading /proc/867/net/tcp proxy.mips-11.elf File opened for reading /proc/378/net/tcp proxy.mips-11.elf File opened for reading /proc/815/net/tcp proxy.mips-11.elf File opened for reading /proc/828/net/tcp proxy.mips-11.elf File opened for reading /proc/908/comm proxy.mips-11.elf File opened for reading /proc/177/comm proxy.mips-11.elf File opened for reading /proc/372/comm proxy.mips-11.elf File opened for reading /proc/904/comm proxy.mips-11.elf File opened for reading /proc/905/comm proxy.mips-11.elf File opened for reading /proc/845/comm proxy.mips-11.elf File opened for reading /proc/319/net/tcp proxy.mips-11.elf File opened for reading /proc/78/comm proxy.mips-11.elf File opened for reading /proc/82/comm proxy.mips-11.elf File opened for reading /proc/821/comm proxy.mips-11.elf File opened for reading /proc/823/comm proxy.mips-11.elf File opened for reading /proc/838/net/tcp proxy.mips-11.elf File opened for reading /proc/873/net/tcp proxy.mips-11.elf File opened for reading /proc/23/comm proxy.mips-11.elf File opened for reading /proc/75/comm proxy.mips-11.elf File opened for reading /proc/698/comm proxy.mips-11.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 703 proxy.mips-11.elf