00354e34b63d0649dd35163325155951210ef2cae4fcd91851a0feb7a40f8239

Analysis

max time kernel
149s
max time network
135s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
17/05/2026, 16:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mipsle.elf
Size 10.6MB
Sample260517-tg63daex2l
SHA256 00354e34b63d0649dd35163325155951210ef2cae4fcd91851a0feb7a40f8239
MD5 b047ff65297ed6b22e642c10c3f77687
SHA1 51d0c22de8781d07bbb5f5007ec8c0af9fedc876
SHA512 d0d826089269bc1d96de437bd52b7e640d2b8735c6159867e87bc576c5dfd2042ea801f1dc5bc6586aa9a1ad83fc2b4a73ac990b49a9a4bf1372024a93e44049
SSDEEP 98304:Ouk+EnQOT5ztEXmSKv1vZ0AUDjfo+rPWZpPwScvgrKGAw:kHnQ6z+2S+32bo+rQAvg/Aw
TLSH
T17FB64C05ED853BE6C85D4E3454FACAA512B05D100AF34A2A6664FFACBC772297F078DC
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	mipsle.elf
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	mipsle.elf

Reads runtime system information 3 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	mipsle.elf
File opened for reading	/proc/self/mountinfo	mipsle.elf
File opened for reading	/proc/self/auxv	mipsle.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
797	mipsle.elf

/tmp/mipsle.elf
/tmp/mipsle.elf
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
- System Network Configuration Discovery
PID:797

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads