Analysis
- max time kernel
145s - max time network
138s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
23/05/2026, 14:04
Behavioral task
behavioral1
Sample
luxzz.mips
Resource
debian9-mipsbe-20260513-en
debian-9-mips
6 signatures
150 seconds
General
- Target luxzz.mips
- Size 47KB
- Sample260523-rdb2qaaw8k
- SHA256 658b94e551e0fe40717a08ca625ed49ae9cf5aa1f0be052b00bd3911169cfc58
- MD5 3f2048e9f38ea19718a0d149a0131dbb
- SHA1 88e9505898cfe3a28f66a784c95e066fc44f1c30
- SHA512 a4a26b6eba0a4c3fcf84a149ba3af115060d2bb4d26ab7959f0c4dc672bb7410688de41e96eaa7532f0356824ba1cb22098071c5a4495eacd0ff62a0629b7c1d
- SSDEEP 768:A9kiBVrBtliBtG7pcv3gQJ4SFcSCQCaxPmiDZFvPJ20glVbsbqgIt8vBYZNSPK6+:A9HrBniBteCPJJ4gcScKfvPJ20gTbsq7
- TLSH T1952301B6600E43B2F1114531CE7C0B69B8F19CD61338E89BD48E0CF2947A87B5CE9E26
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Malware Config
Extracted
Family
-
mirai
C2
-
anakkontolmemek.my.id
Signatures
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog luxzz.mips File opened for modification /dev/misc/watchdog luxzz.mips - Enumerates running processes
Discovers information about currently running processes on the system
- Writes file to system bin folder 2 IoCs
description ioc Process File opened for modification /sbin/watchdog luxzz.mips File opened for modification /bin/watchdog luxzz.mips -
description ioc Process File opened for reading /proc/3/status luxzz.mips File opened for reading /proc/70/status luxzz.mips File opened for reading /proc/81/status luxzz.mips File opened for reading /proc/321/status luxzz.mips File opened for reading /proc/699/status luxzz.mips File opened for reading /proc/21/status luxzz.mips File opened for reading /proc/37/status luxzz.mips File opened for reading /proc/78/status luxzz.mips File opened for reading /proc/319/status luxzz.mips File opened for reading /proc/668/status luxzz.mips File opened for reading /proc/711/status luxzz.mips File opened for reading /proc/4/status luxzz.mips File opened for reading /proc/9/status luxzz.mips File opened for reading /proc/10/status luxzz.mips File opened for reading /proc/151/status luxzz.mips File opened for reading /proc/233/status luxzz.mips File opened for reading /proc/72/status luxzz.mips File opened for reading /proc/377/status luxzz.mips File opened for reading /proc/666/status luxzz.mips File opened for reading /proc/712/status luxzz.mips File opened for reading /proc/22/status luxzz.mips File opened for reading /proc/76/status luxzz.mips File opened for reading /proc/713/status luxzz.mips File opened for reading /proc/8/status luxzz.mips File opened for reading /proc/16/status luxzz.mips File opened for reading /proc/36/status luxzz.mips File opened for reading /proc/123/status luxzz.mips File opened for reading /proc/7/status luxzz.mips File opened for reading /proc/15/status luxzz.mips File opened for reading /proc/112/status luxzz.mips File opened for reading /proc/326/status luxzz.mips File opened for reading /proc/1/status luxzz.mips File opened for reading /proc/14/status luxzz.mips File opened for reading /proc/69/status luxzz.mips File opened for reading /proc/122/status luxzz.mips File opened for reading /proc/383/status luxzz.mips File opened for reading /proc/705/status luxzz.mips File opened for reading /proc/708/status luxzz.mips File opened for reading /proc/2/status luxzz.mips File opened for reading /proc/19/status luxzz.mips File opened for reading /proc/73/status luxzz.mips File opened for reading /proc/176/status luxzz.mips File opened for reading /proc/430/status luxzz.mips File opened for reading /proc/675/status luxzz.mips File opened for reading /proc/704/status luxzz.mips File opened for reading /proc/24/status luxzz.mips File opened for reading /proc/74/status luxzz.mips File opened for reading /proc/676/status luxzz.mips File opened for reading /proc/706/status luxzz.mips File opened for reading /proc/71/status luxzz.mips File opened for reading /proc/320/status luxzz.mips File opened for reading /proc/11/status luxzz.mips File opened for reading /proc/17/status luxzz.mips File opened for reading /proc/77/status luxzz.mips File opened for reading /proc/84/status luxzz.mips File opened for reading /proc/700/status luxzz.mips File opened for reading /proc/6/status luxzz.mips File opened for reading /proc/20/status luxzz.mips File opened for reading /proc/23/status luxzz.mips File opened for reading /proc/353/status luxzz.mips File opened for reading /proc/13/status luxzz.mips File opened for reading /proc/18/status luxzz.mips File opened for reading /proc/82/status luxzz.mips File opened for reading /proc/160/status luxzz.mips - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 708 luxzz.mips