12005831c060b0a64e2ccd1f490e1cf6b7601a4ba9b815b2962bf1c2f6627389

Analysis

max time kernel
142s
max time network
154s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
07/09/2026, 06:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mips
Size 7.9MB
Sample260907-g197xsysfw
SHA256 12005831c060b0a64e2ccd1f490e1cf6b7601a4ba9b815b2962bf1c2f6627389
MD5 59df7dece442003c8b2d648ee1bb54c2
SHA1 0e8e6400f76839f88b099aed1a0963cdf751b55c
SHA512 e11461451eec22bd55d36e9a0805853f9d0230fd5629f7a3d1214a46cfb0c11bb5c585ff11f5c9cbcc623fd4ef3762aa53695218abc8aa66b2ba8d9b158d3ea7
SSDEEP 49152:rz5PetxdC2jgIkc8T+v4Z35+AwF728IcMuWJy3pnkAxHJPEP3pdXtA6sGV5TzsVg:g3AAGDtA6b4+Pi5TsZoEIWhnUjEZ
TLSH
T1688628177B69EB0EC76921341CB2CA9427291C8506D7A527B381F31DE9F20BD4A6ECF4
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	/usr/sbin/sshd	707	mips

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	mips

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
703	mips

/tmp/mips
/tmp/mips
1⤵
- Changes its process name
- Enumerates kernel/hardware configuration
- System Network Configuration Discovery
PID:703

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads