Analysis
- max time kernel
126s - max time network
161s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
25/08/2026, 18:20
Static task
static1
Behavioral task
behavioral1
Sample
mipsel
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
5 signatures
150 seconds
General
- Target mipsel
- Size 7.8MB
- Sample260825-wy9wpstyfz
- SHA256 1bad704a3320fe86f93a7afb94a310334abac519c81bc000514541696afff9f7
- MD5 c4c81c9a26a5b8363aa7a3e70a95fac8
- SHA1 d465d8cecaae98ce5435b3377cd3b1bab2c194ea
- SHA512 0b1b03657517dea20596d9c54829171c50cfa0db5923cb411523c38c05b4782c32bc0a3fb8c702269eb0e0b1db0694112b2882b6ea07cf9854988081aca7e807
- SSDEEP 49152:+DLGNFenCR+Fmn6Ok0CQZaqXh+4vCcIE17Il8Zw7Ggc5ES:xULQZr1ImDy7jOES
- TLSH T1D8860805ADC53BE6C42C5E7444EACA5522B06D140AF24A3A26A4FFEDBC762757F078CC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /lib/systemd/systemd-udevd 806 mipsel - Enumerates kernel/hardware configuration 1 TTPs 2 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/system.slice/agent.service/cpu.max mipsel File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size mipsel -
description ioc Process File opened for reading /proc/137/environ mipsel File opened for reading /proc/15/stat mipsel File opened for reading /proc/32/environ mipsel File opened for reading /proc/790/environ mipsel File opened for reading /proc/25/stat mipsel File opened for reading /proc/114/environ mipsel File opened for reading /proc/27/stat mipsel File opened for reading /proc/24/stat mipsel File opened for reading /proc/138/stat mipsel File opened for reading /proc/self/auxv mipsel File opened for reading /proc/23/environ mipsel File opened for reading /proc/42/environ mipsel File opened for reading /proc/113/environ mipsel File opened for reading /proc/22/environ mipsel File opened for reading /proc/8/stat mipsel File opened for reading /proc/114/stat mipsel File opened for reading /proc/16/stat mipsel File opened for reading /proc/30/environ mipsel File opened for reading /proc/31/environ mipsel File opened for reading /proc/34/environ mipsel File opened for reading /proc/58/stat mipsel File opened for reading /proc/6/environ mipsel File opened for reading /proc/10/environ mipsel File opened for reading /proc/19/stat mipsel File opened for reading /proc/33/stat mipsel File opened for reading /proc/34/stat mipsel File opened for reading /proc/5/stat mipsel File opened for reading /proc/11/environ mipsel File opened for reading /proc/111/environ mipsel File opened for reading /proc/115/stat mipsel File opened for reading /proc/14/environ mipsel File opened for reading /proc/16/environ mipsel File opened for reading /proc/25/environ mipsel File opened for reading /proc/772/environ mipsel File opened for reading /proc/839/stat mipsel File opened for reading /proc/789/stat mipsel File opened for reading /proc/9/environ mipsel File opened for reading /proc/42/stat mipsel File opened for reading /proc/58/environ mipsel File opened for reading /proc/21/stat mipsel File opened for reading /proc/28/stat mipsel File opened for reading /proc/3/environ mipsel File opened for reading /proc/7/stat mipsel File opened for reading /proc/8/environ mipsel File opened for reading /proc/10/stat mipsel File opened for reading /proc/17/stat mipsel File opened for reading /proc/45/stat mipsel File opened for reading /proc/761/stat mipsel File opened for reading /proc/18/stat mipsel File opened for reading /proc/3/stat mipsel File opened for reading /proc/111/stat mipsel File opened for reading /proc/113/stat mipsel File opened for reading /proc/2/environ mipsel File opened for reading /proc/23/stat mipsel File opened for reading /proc/33/environ mipsel File opened for reading /proc/59/stat mipsel File opened for reading /proc/761/environ mipsel File opened for reading /proc/31/stat mipsel File opened for reading /proc/7/environ mipsel File opened for reading /proc/self/mountinfo mipsel File opened for reading /proc/48/stat mipsel File opened for reading /proc/115/environ mipsel File opened for reading /proc/13/environ mipsel File opened for reading /proc/27/environ mipsel - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 799 mipsel