Analysis
- max time kernel
147s - max time network
149s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
28/06/2026, 03:30
Behavioral task
behavioral1
Sample
m-i.p-s.Sakura.elf
Resource
debian9-mipsbe-20260513-en
2 signatures
150 seconds
General
- Target m-i.p-s.Sakura.elf
- Size 147KB
- Sample260628-d2vxvaez9j
- SHA256 239adbe22edee724d96e4b5fe0f4a7213c8eba6dba33ff938340dd33aaa08ad6
- MD5 544630271edf03986a412bbfa6dcf3c0
- SHA1 f93bec6494b24956bbe9e3458cdf6d749e520f75
- SHA512 56826efb489b05608d3e8426f7fb84fd584d91c1038ed2a2a9bdfc4bb403afecf1263d79a4af17360c5d166a44043f9634d8bc5b2d11c0eadf39695d0f8dc0fc
- SSDEEP 1536:LqAo2mV7PguPkn02rKCpSuSdS3So82rKCcS1LFfqFp3nem1nYose/d4RJJFOAmDP:lKGdrZWn71vORJ/mDOVcG1DJ01so
- TLSH T104E3843E7E22BFBEE26882310BF35F70979561D227919346E26CE6181E7128D1C5F760
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route m-i.p-s.Sakura.elf - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route m-i.p-s.Sakura.elf