Analysis
- max time kernel
125s - max time network
155s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
05/08/2026, 00:22
Static task
static1
Behavioral task
behavioral1
Sample
mipsel
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
8 signatures
150 seconds
General
- Target mipsel
- Size 127KB
- Sample260805-apbfws1yet
- SHA256 226d5f0493530a890fe642db959232b63ba8b7be48ea94a65cc68f8437b10ae5
- MD5 c21078339fa0bd148abfd01e2943345b
- SHA1 af8c8bbe61494b5ac8cb1811066ce833c1ab7a1d
- SHA512 73c7f3f3a1a7429a40b0d93bbbd60149efe1faf6836ffeb1a0aeb765b7cebca6a9f7c50ffb1b10fbafbbf1ea4a0bc19bbe81c854a61587b378c343c7e0561bfb
- SSDEEP 1536:kaDrBahdmmasZO+D+e7C1HldWtsVf9y4aYvrDLx7Fqlv0DiPgsReo63F9QWWpCjy:LXsulm+1G4aYvzxESyeo63F9QWGKbVi
- TLSH T15BD3F809BFA00FFBE89FDD3341F90B0A258D691763A97B367534D818F59A14B0AD3864
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Renames itself 1 IoCs
pid Process 798 mipsel - Enumerates running processes
Discovers information about currently running processes on the system
- Reads MAC address of network interface 2 TTPs 1 IoCs
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
description ioc Process File opened for reading /sys/class/net/enp0s19/address mipsel - Reads network interface configuration 2 TTPs 2 IoCs
Fetches information about one or more active network interfaces.
description ioc Process File opened for reading /sys/class/net/enp0s19/flags mipsel File opened for reading /sys/class/net/enp0s19/carrier mipsel - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself klogd 798 mipsel - Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/class/net mipsel -
description ioc Process File opened for reading /proc/4/cmdline mipsel File opened for reading /proc/24/cmdline mipsel File opened for reading /proc/37/cmdline mipsel File opened for reading /proc/400/cmdline mipsel File opened for reading /proc/802/cmdline mipsel File opened for reading /proc/806/cmdline mipsel File opened for reading /proc/3/cmdline mipsel File opened for reading /proc/29/cmdline mipsel File opened for reading /proc/59/cmdline mipsel File opened for reading /proc/805/cmdline mipsel File opened for reading /proc/814/cmdline mipsel File opened for reading /proc/835/cmdline mipsel File opened for reading /proc/838/cmdline mipsel File opened for reading /proc/1/cmdline mipsel File opened for reading /proc/10/cmdline mipsel File opened for reading /proc/13/cmdline mipsel File opened for reading /proc/28/cmdline mipsel File opened for reading /proc/30/cmdline mipsel File opened for reading /proc/119/cmdline mipsel File opened for reading /proc/362/cmdline mipsel File opened for reading /proc/368/cmdline mipsel File opened for reading /proc/2/cmdline mipsel File opened for reading /proc/32/cmdline mipsel File opened for reading /proc/114/cmdline mipsel File opened for reading /proc/346/cmdline mipsel File opened for reading /proc/399/cmdline mipsel File opened for reading /proc/677/cmdline mipsel File opened for reading /proc/790/cmdline mipsel File opened for reading /proc/795/cmdline mipsel File opened for reading /proc/27/cmdline mipsel File opened for reading /proc/34/cmdline mipsel File opened for reading /proc/138/cmdline mipsel File opened for reading /proc/262/cmdline mipsel File opened for reading /proc/807/cmdline mipsel File opened for reading /proc/808/cmdline mipsel File opened for reading /proc/809/cmdline mipsel File opened for reading /proc/817/cmdline mipsel File opened for reading /proc/12/cmdline mipsel File opened for reading /proc/22/cmdline mipsel File opened for reading /proc/23/cmdline mipsel File opened for reading /proc/35/cmdline mipsel File opened for reading /proc/115/cmdline mipsel File opened for reading /proc/764/cmdline mipsel File opened for reading /proc/766/cmdline mipsel File opened for reading /proc/801/cmdline mipsel File opened for reading /proc/371/cmdline mipsel File opened for reading /proc/388/cmdline mipsel File opened for reading /proc/701/cmdline mipsel File opened for reading /proc/self/exe mipsel File opened for reading /proc/818/cmdline mipsel File opened for reading /proc/822/cmdline mipsel File opened for reading /proc/833/cmdline mipsel File opened for reading /proc/20/cmdline mipsel File opened for reading /proc/45/cmdline mipsel File opened for reading /proc/137/cmdline mipsel File opened for reading /proc/775/cmdline mipsel File opened for reading /proc/804/cmdline mipsel File opened for reading /proc/815/cmdline mipsel File opened for reading /proc/823/cmdline mipsel File opened for reading /proc/827/cmdline mipsel File opened for reading /proc/113/cmdline mipsel File opened for reading /proc/182/cmdline mipsel File opened for reading /proc/204/cmdline mipsel File opened for reading /proc/26/cmdline mipsel - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 798 mipsel