Analysis
- max time kernel
149s - max time network
149s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
- submitted
12/08/2026, 18:18
General
- Target bot.mips
- Size 169KB
- Sample260812-wxyr2ssdnf
- SHA256 0f9f3634949e0632da172e33c8a63172cfe4feba72f38020d6a1b7bffda21ae0
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
- Outbound SSH connection to public host 2 TTPs 14 IoCs
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.
- Traces itself 2 IoCs
Traces itself to prevent debugging attempts
- Changes its process name 1 IoCs
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/bot.mips/tmp/bot.mips1⤵
- Deletes itself
- Traces itself
- Changes its process name
- System Network Configuration Discovery
- Writes file to tmp directory