839351cde72ac36b141031444b7e68bed741378c39c5134e8e27e9609823bd98

Analysis

max time kernel
144s
max time network
150s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
08/08/2026, 06:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bot.mipsle.elf
Size 6.3MB
Sample260808-hjxe6ssckf
SHA256 839351cde72ac36b141031444b7e68bed741378c39c5134e8e27e9609823bd98
MD5 d4ee1f26271f11981e69339b1de0fe27
SHA1 fa1d4d698cdf6a9f9e460334014a1eb09bf7eb65
SHA512 1a93460f01933e08142a916793c3427f28bba39d745b89ccf1d0692017c4d9a69abc0512783bda4449352d91fbec1458f3bd96dd08d8dd32efc9c48445cf133a
SSDEEP 49152:vOr+eQGD1tmaILI2/fGAKh7rHXJO+/U6q5qq1uZV105E02:8bj4rcKEp
TLSH
T17966F805BDC52BF6C81D4B3444EACA9612B05D100AF25A3A56A4FFA9BC772387F47C9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	bot.mipsle.elf
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	bot.mipsle.elf

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	bot.mipsle.elf
File opened for reading	/proc/self/mountinfo	bot.mipsle.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
806	bot.mipsle.elf

/tmp/bot.mipsle.elf
/tmp/bot.mipsle.elf
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
- System Network Configuration Discovery
PID:806

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads