Analysis
- max time kernel
150s - max time network
143s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
07/09/2026, 12:36
Behavioral task
behavioral1
Sample
main_mips
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
General
- Target main_mips
- Size 193KB
- Sample260907-pterfavway
- SHA256 8efc723ae0a4d83696eeeae136664a4c6c89d7dd8f7d2426ca3f0498ddeb7ffb
- MD5 ae48b15acfbff7d23d5700178d918d83
- SHA1 e05948c4a4b0e52aa3bf89b056ecc1ae0dc5aaf6
- SHA512 41f560807da0fdc9be84eb1b9a3f76351b0e945b2eba384f0ddcc25ab19c159fcb1d2f44223c509f086864be68d804bda188dcf38c6b4e5d83076f377705bad7
- SSDEEP 3072:5lQKmmjHeSIQi1prL9mm8RzyEaxuJ5v5fCH:5lQKrHAPQJRgxqvdCH
- TLSH T16F14A71E2E228F7DF668873047F78A25976C23D627E1D684D2ACC1145F6039E641FFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 708 main_mips - Traces itself 2 IoCs
Traces itself to prevent debugging attempts
pid Process 708 main_mips 709 main_mips - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself httpd 708 main_mips - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 708 main_mips - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/main_mips main_mips