Analysis
- max time kernel
151s - max time network
153s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
22/07/2026, 00:23
Static task
static1
Behavioral task
behavioral1
Sample
mipsel
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
8 signatures
150 seconds
General
- Target mipsel
- Size 127KB
- Sample260722-aptbpss1ds
- SHA256 226d5f0493530a890fe642db959232b63ba8b7be48ea94a65cc68f8437b10ae5
- MD5 c21078339fa0bd148abfd01e2943345b
- SHA1 af8c8bbe61494b5ac8cb1811066ce833c1ab7a1d
- SHA512 73c7f3f3a1a7429a40b0d93bbbd60149efe1faf6836ffeb1a0aeb765b7cebca6a9f7c50ffb1b10fbafbbf1ea4a0bc19bbe81c854a61587b378c343c7e0561bfb
- SSDEEP 1536:kaDrBahdmmasZO+D+e7C1HldWtsVf9y4aYvrDLx7Fqlv0DiPgsReo63F9QWWpCjy:LXsulm+1G4aYvzxESyeo63F9QWGKbVi
- TLSH T15BD3F809BFA00FFBE89FDD3341F90B0A258D691763A97B367534D818F59A14B0AD3864
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Renames itself 1 IoCs
pid Process 801 mipsel - Enumerates running processes
Discovers information about currently running processes on the system
- Reads MAC address of network interface 2 TTPs 1 IoCs
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
description ioc Process File opened for reading /sys/class/net/enp0s19/address mipsel - Reads network interface configuration 2 TTPs 2 IoCs
Fetches information about one or more active network interfaces.
description ioc Process File opened for reading /sys/class/net/enp0s19/carrier mipsel File opened for reading /sys/class/net/enp0s19/flags mipsel - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself watchdog 801 mipsel - Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/class/net mipsel -
description ioc Process File opened for reading /proc/10/cmdline mipsel File opened for reading /proc/33/cmdline mipsel File opened for reading /proc/53/cmdline mipsel File opened for reading /proc/110/cmdline mipsel File opened for reading /proc/428/cmdline mipsel File opened for reading /proc/796/cmdline mipsel File opened for reading /proc/803/cmdline mipsel File opened for reading /proc/809/cmdline mipsel File opened for reading /proc/59/cmdline mipsel File opened for reading /proc/707/cmdline mipsel File opened for reading /proc/765/cmdline mipsel File opened for reading /proc/827/cmdline mipsel File opened for reading /proc/835/cmdline mipsel File opened for reading /proc/838/cmdline mipsel File opened for reading /proc/16/cmdline mipsel File opened for reading /proc/24/cmdline mipsel File opened for reading /proc/27/cmdline mipsel File opened for reading /proc/30/cmdline mipsel File opened for reading /proc/47/cmdline mipsel File opened for reading /proc/407/cmdline mipsel File opened for reading /proc/804/cmdline mipsel File opened for reading /proc/811/cmdline mipsel File opened for reading /proc/19/cmdline mipsel File opened for reading /proc/136/cmdline mipsel File opened for reading /proc/395/cmdline mipsel File opened for reading /proc/406/cmdline mipsel File opened for reading /proc/767/cmdline mipsel File opened for reading /proc/797/cmdline mipsel File opened for reading /proc/810/cmdline mipsel File opened for reading /proc/812/cmdline mipsel File opened for reading /proc/20/cmdline mipsel File opened for reading /proc/377/cmdline mipsel File opened for reading /proc/380/cmdline mipsel File opened for reading /proc/29/cmdline mipsel File opened for reading /proc/774/cmdline mipsel File opened for reading /proc/818/cmdline mipsel File opened for reading /proc/822/cmdline mipsel File opened for reading /proc/830/cmdline mipsel File opened for reading /proc/837/cmdline mipsel File opened for reading /proc/22/cmdline mipsel File opened for reading /proc/31/cmdline mipsel File opened for reading /proc/42/cmdline mipsel File opened for reading /proc/58/cmdline mipsel File opened for reading /proc/779/cmdline mipsel File opened for reading /proc/824/cmdline mipsel File opened for reading /proc/825/cmdline mipsel File opened for reading /proc/23/cmdline mipsel File opened for reading /proc/25/cmdline mipsel File opened for reading /proc/352/cmdline mipsel File opened for reading /proc/762/cmdline mipsel File opened for reading /proc/794/cmdline mipsel File opened for reading /proc/17/cmdline mipsel File opened for reading /proc/1/cmdline mipsel File opened for reading /proc/8/cmdline mipsel File opened for reading /proc/28/cmdline mipsel File opened for reading /proc/34/cmdline mipsel File opened for reading /proc/48/cmdline mipsel File opened for reading /proc/826/cmdline mipsel File opened for reading /proc/836/cmdline mipsel File opened for reading /proc/14/cmdline mipsel File opened for reading /proc/118/cmdline mipsel File opened for reading /proc/662/cmdline mipsel File opened for reading /proc/678/cmdline mipsel File opened for reading /proc/701/cmdline mipsel - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 801 mipsel