Analysis
- max time kernel
147s - max time network
153s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
29/06/2026, 18:16
Static task
static1
Behavioral task
behavioral1
Sample
mipsel.ghost
Resource
debian12-mipsel-20260513-en
2 signatures
150 seconds
General
- Target mipsel.ghost
- Size 167KB
- Sample260629-wwrbksc19r
- SHA256 de4512a40cfdc03935663a7368c265d26ee46bd52494d50676f3376fb4d4fc62
- MD5 e3422b452d518d48431848c19e2c11f4
- SHA1 91e8af0bad451a8489285fe9a963bae68dd17fbb
- SHA512 e8b450c52186a08b0bf89d122e4bff55e898df89258c61bd5c2f12112bd197cc499dd5c34c09093d403234fc91b04141bb41275c01154a3105d4723bc71e2b58
- SSDEEP 3072:qDiFBG/S+CGG3zNYoCTqiyGUm+GI6QNOyjm7UM52nVDHa24qGeWDFHfgE9nN+Sq:ZFBG/S+gzNYoCdN+G7QU4mwP/QZ+
- TLSH T190F33A42EF401AABC01ECF31061B835613EDD48A53EB271B717CCA5E7E5A60A5DD7E88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/self/maps grep - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 804 mipsel.ghost
Processes
-
/tmp/mipsel.ghost/tmp/mipsel.ghost1⤵
- System Network Configuration Discovery
PID:804 -
/bin/shsh -c "uname -m"2⤵PID:806
-
/usr/bin/unameuname -m3⤵PID:808
-
-
-
/bin/shsh -c "cat /etc/os-release 2>/dev/null | grep -E '^ID=' | cut -d= -f2 | tr -d '\"'"2⤵PID:810
-
/usr/bin/catcat /etc/os-release3⤵PID:813
-
-
/usr/bin/cutcut "-d=" -f23⤵PID:816
-
-
/usr/bin/trtr -d "\""3⤵PID:817
-
-
/usr/bin/grepgrep -E "^ID="3⤵
- Reads runtime system information
PID:814
-
-