Analysis
- max time kernel
150s - max time network
152s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
16/08/2026, 02:56
General
- Target b3de4e69a651b0afa853e5b1d5a67baacd89705c3c87630bdb0ed7ba23c5a6f5
- Size 147KB
- Sample260816-dfapsacj7z
- SHA256 b3de4e69a651b0afa853e5b1d5a67baacd89705c3c87630bdb0ed7ba23c5a6f5
- MD5 572154de8e92069852a8e5a8dac16f78
- SHA1 0206a9df91548e6df5273c7e0c80617993d55c6b
- SHA512 11d68b161f2dffdd2d88a3d745aea5b0fe9f3e9f09189d58d0c01d345c37ae68fe0cf3404f0d0602d8fc6d12809d529ff1985c0ca54ab35d3c7f8b176576e8e9
- SSDEEP 1536:LqAo2mV7PguPkn02rKCpSuSdS3So82rKCcS1LFfqFp3nem1nYose/d4FJJFOAmDP:lKGdrZWn71vOFJ/mDOVcG1DJ01so
- TLSH T1E2E3843E7E21BFBEE26882310BF35F70979561D227919386E26CE6181E7128D1C5F760
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/route b3de4e69a651b0afa853e5b1d5a67baacd89705c3c87630bdb0ed7ba23c5a6f5 - Checks CPU configuration 1 TTPs 1 IoCs
Checks CPU information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /proc/cpuinfo b3de4e69a651b0afa853e5b1d5a67baacd89705c3c87630bdb0ed7ba23c5a6f5 - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/route b3de4e69a651b0afa853e5b1d5a67baacd89705c3c87630bdb0ed7ba23c5a6f5