Analysis
- max time kernel
1s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
03/09/2026, 18:27
Static task
static1
Behavioral task
behavioral1
Sample
sample
Resource
ubuntu1804-amd64-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample
Resource
debian9-armhf-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
sample
Resource
debian9-mipsbe-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
sample
Resource
debian9-mipsel-20260513-en
2 signatures
150 seconds
General
- Target sample
- Size 45KB
- Sample260903-w315csdn8x
- SHA256 e6e060de9508327b2861e857907801819180fdd33dbcae187cbd2ecef1c6fba0
- MD5 c190a98f4c3b5bb2e7dbaf91f0b9e55f
- SHA1 9f499846e5f61dccbfc80df9fa9670f805845a6c
- SHA512 0220a51f3b49b2b4829b02fc2fc0a7b8300e75ae144abbf73c03ef1f6da41578d34fd0b44f2d2f0e4bc2f341a48a0cd0c7cd0506af9a96c21de8f286ef551f20
- SSDEEP 768:qu1HYh5PRnly/c+bO1FB4zQKD+Qmx8Axxu6zoju7goIpyMvR6n:qHBI/c+W4VsWAujuoyM56n
- TLSH T175230877B48105383F17C89C8E53986A2B5E3027F4A95458B9ACB0D43FFC174A576BB8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
Malware Config
Signatures
- Reads CPU attributes 1 TTPs 1 IoCs
description ioc Process File opened for reading /sys/devices/system/cpu/online sysctl -
description ioc Process File opened for reading /proc/filesystems sysctl File opened for reading /proc/sys/kernel/osrelease sysctl
Processes
-
/tmp/sample/tmp/sample1⤵PID:705
-
/usr/local/sbin/bashbash /tmp/sample1⤵PID:705
-
/usr/local/bin/bashbash /tmp/sample1⤵PID:705
-
/usr/sbin/bashbash /tmp/sample1⤵PID:705
-
/usr/bin/bashbash /tmp/sample1⤵PID:705
-
/sbin/bashbash /tmp/sample1⤵PID:705
-
/bin/bashbash /tmp/sample1⤵PID:705
-
/sbin/sysctlsysctl -n hw.ncpu2⤵
- Reads CPU attributes
- Reads runtime system information
PID:713
-
-
/usr/bin/nprocnproc2⤵PID:720
-