Analysis
- max time kernel
150s - max time network
152s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
- submitted
30/07/2026, 18:52
General
- Target zero.mipsel.elf
- Size 57KB
- Sample260730-xh927seq9s
- SHA256 f6343ec28a56575486792998c0cad6e7d86747e93a97c93867af0cc4c780156c
Score
10/10
Malware Config
Extracted
Family
-
mirai
C2
-
217.60.195.127
Signatures
- Family: Mirai
Mirai is a prevalent Linux malware infecting exposed network devices.
- Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
- Traces itself 1 IoCs
Traces itself to prevent debugging attempts
- Changes its process name 1 IoCs
- Reads runtime system information 15 IoCs
Reads data from /proc virtual filesystem.
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/zero.mipsel.elf/tmp/zero.mipsel.elf1⤵
- Modifies Watchdog functionality
- Traces itself
- Changes its process name
- Reads runtime system information
- System Network Configuration Discovery