Analysis
- max time kernel
151s - max time network
11s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
04/08/2026, 10:59
Static task
static1
General
- Target cumminer.mpsl.elf
- Size 180KB
- Sample260804-m3twlsdk5s
- SHA256 63d914cc23cd23f88031bbc2f1e787324c358a8a8f1e2c2d41509bb3b40adb5d
- MD5 58773bd11730ea339d5f3f7eb6040ebf
- SHA1 981d41125cc70050e8b6039186e8b993aeb5cf35
- SHA512 690539006f60fbe20df68e5c71f100e2c8e124d6c701987376d56846e931252b8604f07d7026c1e557e34d3d2a1cdbc4d987f2f6bd2d41aeae4431f509c372e6
- SSDEEP 3072:H7BIP6NyplObdhJm8OjrgyWyEUlmODknLvZ/XwtZ6wwu9lF:bB66NyplsJRyWyE2F4npXwt0wjjF
- TLSH T16F04298AAEA10FDFC46FCE30565E132716DC584B83E5B337967C8C98719B2848AD3D58
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Cryptocurrency Miner
Makes network request to known mining pool URL.
- Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp cumminer.mpsl.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/tcp cumminer.mpsl.elf -
description ioc Process File opened for reading /proc/703/cmdline cumminer.mpsl.elf File opened for reading /proc/815/status cumminer.mpsl.elf File opened for reading /proc/845/status cumminer.mpsl.elf File opened for reading /proc/340/cmdline cumminer.mpsl.elf File opened for reading /proc/378/cmdline cumminer.mpsl.elf File opened for reading /proc/815/cmdline cumminer.mpsl.elf File opened for reading /proc/816/cmdline cumminer.mpsl.elf File opened for reading /proc/825/status cumminer.mpsl.elf File opened for reading /proc/817/cmdline cumminer.mpsl.elf File opened for reading /proc/829/cmdline cumminer.mpsl.elf File opened for reading /proc/830/cmdline cumminer.mpsl.elf File opened for reading /proc/807/exe cumminer.mpsl.elf File opened for reading /proc/203/cmdline cumminer.mpsl.elf File opened for reading /proc/663/cmdline cumminer.mpsl.elf File opened for reading /proc/810/cmdline cumminer.mpsl.elf File opened for reading /proc/813/status cumminer.mpsl.elf File opened for reading /proc/814/status cumminer.mpsl.elf File opened for reading /proc/831/status cumminer.mpsl.elf File opened for reading /proc/835/status cumminer.mpsl.elf File opened for reading /proc/179/cmdline cumminer.mpsl.elf File opened for reading /proc/678/cmdline cumminer.mpsl.elf File opened for reading /proc/799/cmdline cumminer.mpsl.elf File opened for reading /proc/819/status cumminer.mpsl.elf File opened for reading /proc/837/status cumminer.mpsl.elf File opened for reading /proc/845/cmdline cumminer.mpsl.elf File opened for reading /proc/404/cmdline cumminer.mpsl.elf File opened for reading /proc/816/status cumminer.mpsl.elf File opened for reading /proc/821/status cumminer.mpsl.elf File opened for reading /proc/825/cmdline cumminer.mpsl.elf File opened for reading /proc/827/status cumminer.mpsl.elf File opened for reading /proc/836/cmdline cumminer.mpsl.elf File opened for reading /proc/842/status cumminer.mpsl.elf File opened for reading /proc/804/fd cumminer.mpsl.elf File opened for reading /proc/812/cmdline cumminer.mpsl.elf File opened for reading /proc/835/cmdline cumminer.mpsl.elf File opened for reading /proc/389/cmdline cumminer.mpsl.elf File opened for reading /proc/679/cmdline cumminer.mpsl.elf File opened for reading /proc/797/cmdline cumminer.mpsl.elf File opened for reading /proc/820/cmdline cumminer.mpsl.elf File opened for reading /proc/829/status cumminer.mpsl.elf File opened for reading /proc/830/status cumminer.mpsl.elf File opened for reading /proc/836/status cumminer.mpsl.elf File opened for reading /proc/839/status cumminer.mpsl.elf File opened for reading /proc/763/cmdline cumminer.mpsl.elf File opened for reading /proc/822/cmdline cumminer.mpsl.elf File opened for reading /proc/826/cmdline cumminer.mpsl.elf File opened for reading /proc/832/status cumminer.mpsl.elf File opened for reading /proc/834/cmdline cumminer.mpsl.elf File opened for reading /proc/838/cmdline cumminer.mpsl.elf File opened for reading /proc/839/cmdline cumminer.mpsl.elf File opened for reading /proc/844/status cumminer.mpsl.elf File opened for reading /proc/407/cmdline cumminer.mpsl.elf File opened for reading /proc/814/cmdline cumminer.mpsl.elf File opened for reading /proc/821/cmdline cumminer.mpsl.elf File opened for reading /proc/842/cmdline cumminer.mpsl.elf File opened for reading /proc/844/cmdline cumminer.mpsl.elf File opened for reading /proc/317/cmdline cumminer.mpsl.elf File opened for reading /proc/838/status cumminer.mpsl.elf File opened for reading /proc/840/status cumminer.mpsl.elf File opened for reading /proc/393/cmdline cumminer.mpsl.elf File opened for reading /proc/828/cmdline cumminer.mpsl.elf File opened for reading /proc/832/cmdline cumminer.mpsl.elf File opened for reading /proc/376/cmdline cumminer.mpsl.elf File opened for reading /proc/834/status cumminer.mpsl.elf