Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    debian-12_mipsel
  • resource
    debian12-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
  • submitted
    29/06/2026, 18:16

General

  • Target
    mipsel.ghost
  • Size 167KB
  • Sample260629-wwrbksc19r
  • SHA256 de4512a40cfdc03935663a7368c265d26ee46bd52494d50676f3376fb4d4fc62
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

  • System Network Configuration Discovery 1 TTPs 1 IoCs

    Adversaries may gather information about the network configuration of a system.

Processes

  • /tmp/mipsel.ghost
    /tmp/mipsel.ghost
    1⤵
    • System Network Configuration Discovery
    PID:804
    • /bin/sh
      sh -c "uname -m"
      2⤵
        PID:806
        • /usr/bin/uname
          uname -m
          3⤵
            PID:808
        • /bin/sh
          sh -c "cat /etc/os-release 2>/dev/null | grep -E '^ID=' | cut -d= -f2 | tr -d '\"'"
          2⤵
            PID:810
            • /usr/bin/cat
              cat /etc/os-release
              3⤵
                PID:813
              • /usr/bin/cut
                cut "-d=" -f2
                3⤵
                  PID:816
                • /usr/bin/tr
                  tr -d "\""
                  3⤵
                    PID:817
                  • /usr/bin/grep
                    grep -E "^ID="
                    3⤵
                    • Reads runtime system information
                    PID:814

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads