Analysis
- max time kernel
150s - max time network
146s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
23/08/2026, 06:18
Static task
static1
Behavioral task
behavioral1
Sample
mipsel
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
8 signatures
150 seconds
General
- Target mipsel
- Size 127KB
- Sample260823-g2sdhatdmb
- SHA256 226d5f0493530a890fe642db959232b63ba8b7be48ea94a65cc68f8437b10ae5
- MD5 c21078339fa0bd148abfd01e2943345b
- SHA1 af8c8bbe61494b5ac8cb1811066ce833c1ab7a1d
- SHA512 73c7f3f3a1a7429a40b0d93bbbd60149efe1faf6836ffeb1a0aeb765b7cebca6a9f7c50ffb1b10fbafbbf1ea4a0bc19bbe81c854a61587b378c343c7e0561bfb
- SSDEEP 1536:kaDrBahdmmasZO+D+e7C1HldWtsVf9y4aYvrDLx7Fqlv0DiPgsReo63F9QWWpCjy:LXsulm+1G4aYvzxESyeo63F9QWGKbVi
- TLSH T15BD3F809BFA00FFBE89FDD3341F90B0A258D691763A97B367534D818F59A14B0AD3864
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Renames itself 1 IoCs
pid Process 797 mipsel - Enumerates running processes
Discovers information about currently running processes on the system
- Reads MAC address of network interface 2 TTPs 1 IoCs
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
description ioc Process File opened for reading /sys/class/net/enp0s19/address mipsel - Reads network interface configuration 2 TTPs 2 IoCs
Fetches information about one or more active network interfaces.
description ioc Process File opened for reading /sys/class/net/enp0s19/flags mipsel File opened for reading /sys/class/net/enp0s19/carrier mipsel - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself inetd 797 mipsel - Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/class/net mipsel -
description ioc Process File opened for reading /proc/44/cmdline mipsel File opened for reading /proc/53/cmdline mipsel File opened for reading /proc/763/cmdline mipsel File opened for reading /proc/799/cmdline mipsel File opened for reading /proc/self/exe mipsel File opened for reading /proc/818/cmdline mipsel File opened for reading /proc/821/cmdline mipsel File opened for reading /proc/4/cmdline mipsel File opened for reading /proc/20/cmdline mipsel File opened for reading /proc/113/cmdline mipsel File opened for reading /proc/178/cmdline mipsel File opened for reading /proc/354/cmdline mipsel File opened for reading /proc/376/cmdline mipsel File opened for reading /proc/822/cmdline mipsel File opened for reading /proc/833/cmdline mipsel File opened for reading /proc/2/cmdline mipsel File opened for reading /proc/29/cmdline mipsel File opened for reading /proc/793/cmdline mipsel File opened for reading /proc/811/cmdline mipsel File opened for reading /proc/816/cmdline mipsel File opened for reading /proc/819/cmdline mipsel File opened for reading /proc/838/cmdline mipsel File opened for reading /proc/6/cmdline mipsel File opened for reading /proc/32/cmdline mipsel File opened for reading /proc/114/cmdline mipsel File opened for reading /proc/707/cmdline mipsel File opened for reading /proc/813/cmdline mipsel File opened for reading /proc/823/cmdline mipsel File opened for reading /proc/836/cmdline mipsel File opened for reading /proc/26/cmdline mipsel File opened for reading /proc/136/cmdline mipsel File opened for reading /proc/185/cmdline mipsel File opened for reading /proc/400/cmdline mipsel File opened for reading /proc/777/cmdline mipsel File opened for reading /proc/803/cmdline mipsel File opened for reading /proc/13/cmdline mipsel File opened for reading /proc/12/cmdline mipsel File opened for reading /proc/42/cmdline mipsel File opened for reading /proc/135/cmdline mipsel File opened for reading /proc/772/cmdline mipsel File opened for reading /proc/815/cmdline mipsel File opened for reading /proc/15/cmdline mipsel File opened for reading /proc/23/cmdline mipsel File opened for reading /proc/27/cmdline mipsel File opened for reading /proc/34/cmdline mipsel File opened for reading /proc/392/cmdline mipsel File opened for reading /proc/766/cmdline mipsel File opened for reading /proc/791/cmdline mipsel File opened for reading /proc/824/cmdline mipsel File opened for reading /proc/19/cmdline mipsel File opened for reading /proc/59/cmdline mipsel File opened for reading /proc/676/cmdline mipsel File opened for reading /proc/795/cmdline mipsel File opened for reading /proc/837/cmdline mipsel File opened for reading /proc/10/cmdline mipsel File opened for reading /proc/18/cmdline mipsel File opened for reading /proc/47/cmdline mipsel File opened for reading /proc/344/cmdline mipsel File opened for reading /proc/388/cmdline mipsel File opened for reading /proc/662/cmdline mipsel File opened for reading /proc/807/cmdline mipsel File opened for reading /proc/9/cmdline mipsel File opened for reading /proc/11/cmdline mipsel File opened for reading /proc/58/cmdline mipsel - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 797 mipsel