1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98

Analysis

max time kernel
146s
max time network
182s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
09/08/2026, 13:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98.elf
Size 6.3MB
Sample260809-qlft7sae79
SHA256 1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98
MD5 b7ab35b6d4e7d54dffd7904c4f84f9a5
SHA1 9ce9aa8354dac040304cef30abeecece25c746eb
SHA512 6de2a936085fab9be3fd8b529bddc34f1db1a2e02a55be1f926ae396bf616405562e918e067ef4867a70340afdd04f7ecead6244c15bfcbdbc2e4eb3387ab19c
SSDEEP 49152:d/HMCrb5/Q6+6i6o6g6ilOnQN2s0wohqJHuJO+Er45Em:NVQruEm
TLSH
T12466E905BDC42BF6C81D5B3444EACA9612B05D104AF24A3A56A4FFA9BC772387F47C9C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98.elf
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98.elf

Reads runtime system information 2 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98.elf
File opened for reading	/proc/self/mountinfo	1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98.elf

/tmp/1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98.elf
/tmp/1626db34302530cc3942462633a935d52d9ce65270b2ff02cabd9a65b1f6ee98.elf
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
PID:854

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads