Analysis
- max time kernel
124s - max time network
158s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
07/09/2026, 18:36
Static task
static1
Behavioral task
behavioral1
Sample
titan.mipsel.elf
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
8 signatures
150 seconds
General
- Target titan.mipsel.elf
- Size 275KB
- Sample260907-w82cbaaf76
- SHA256 b06db8c873fd891bb4711c9a6d733f052a5d8c60b3e618a52d46f57584d7d420
- MD5 a65ee7fc0f550cca3bb789a8a4ede897
- SHA1 9e4b5835e53d61d400fafb5767ed9b707a6d228b
- SHA512 9fe1aef715933ec77fb0f3bc19f3342bbb97e096d662a844277a6e6313c19e4a08d87e421cdf06e76d9136981a99794ac5f384a7c48c8cfec8f76b6e5d7314bc
- SSDEEP 6144:IhbqCnvxv7qRZdEXYWKVHIIp584eEjyiySFx4f8W84+Oqu:SbFpMW14bjyiBrW8XO
- TLSH T16D543943AE845EDBF41FCDB089BDC3922EE1A0D751E1B53A65BC89DC7E6B10A05934C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Contacts a large (606) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp titan.mipsel.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Reads process memory 1 TTPs 53 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
description ioc Process File opened for reading /proc/26/maps titan.mipsel.elf File opened for reading /proc/29/maps titan.mipsel.elf File opened for reading /proc/33/maps titan.mipsel.elf File opened for reading /proc/35/maps titan.mipsel.elf File opened for reading /proc/42/maps titan.mipsel.elf File opened for reading /proc/113/maps titan.mipsel.elf File opened for reading /proc/25/maps titan.mipsel.elf File opened for reading /proc/28/maps titan.mipsel.elf File opened for reading /proc/30/maps titan.mipsel.elf File opened for reading /proc/16/maps titan.mipsel.elf File opened for reading /proc/12/maps titan.mipsel.elf File opened for reading /proc/32/maps titan.mipsel.elf File opened for reading /proc/114/maps titan.mipsel.elf File opened for reading /proc/115/maps titan.mipsel.elf File opened for reading /proc/9/maps titan.mipsel.elf File opened for reading /proc/58/maps titan.mipsel.elf File opened for reading /proc/792/maps titan.mipsel.elf File opened for reading /proc/3/maps titan.mipsel.elf File opened for reading /proc/10/maps titan.mipsel.elf File opened for reading /proc/13/maps titan.mipsel.elf File opened for reading /proc/15/maps titan.mipsel.elf File opened for reading /proc/17/maps titan.mipsel.elf File opened for reading /proc/19/maps titan.mipsel.elf File opened for reading /proc/48/maps titan.mipsel.elf File opened for reading /proc/138/maps titan.mipsel.elf File opened for reading /proc/21/maps titan.mipsel.elf File opened for reading /proc/23/maps titan.mipsel.elf File opened for reading /proc/27/maps titan.mipsel.elf File opened for reading /proc/31/maps titan.mipsel.elf File opened for reading /proc/779/maps titan.mipsel.elf File opened for reading /proc/793/maps titan.mipsel.elf File opened for reading /proc/5/maps titan.mipsel.elf File opened for reading /proc/6/maps titan.mipsel.elf File opened for reading /proc/7/maps titan.mipsel.elf File opened for reading /proc/18/maps titan.mipsel.elf File opened for reading /proc/20/maps titan.mipsel.elf File opened for reading /proc/22/maps titan.mipsel.elf File opened for reading /proc/53/maps titan.mipsel.elf File opened for reading /proc/111/maps titan.mipsel.elf File opened for reading /proc/8/maps titan.mipsel.elf File opened for reading /proc/11/maps titan.mipsel.elf File opened for reading /proc/34/maps titan.mipsel.elf File opened for reading /proc/44/maps titan.mipsel.elf File opened for reading /proc/59/maps titan.mipsel.elf File opened for reading /proc/118/maps titan.mipsel.elf File opened for reading /proc/119/maps titan.mipsel.elf File opened for reading /proc/137/maps titan.mipsel.elf File opened for reading /proc/24/maps titan.mipsel.elf File opened for reading /proc/37/maps titan.mipsel.elf File opened for reading /proc/47/maps titan.mipsel.elf File opened for reading /proc/774/maps titan.mipsel.elf File opened for reading /proc/4/maps titan.mipsel.elf File opened for reading /proc/14/maps titan.mipsel.elf - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/tcp titan.mipsel.elf - Enumerates kernel/hardware configuration 1 TTPs 64 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/init.scope/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/udev/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice/[email protected]/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-tracing.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/dev-mqueue.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-1.scope titan.mipsel.elf File opened for reading /sys/fs/cgroup/proc-sys-fs-binfmt_misc.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-modprobe.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/ssh.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/[email protected] titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-logind.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-2.scope/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/init.scope titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/exim4-base.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/dbus.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-fs-fuse-connections.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-modprobe.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/dbus.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/atd.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-config.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/cron.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-journald.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/agent.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/proc-sys-fs-binfmt_misc.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected] titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/init.scope titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/[email protected]/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/atd.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-journald.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/dev-mqueue.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-2.scope titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/ssh.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/exim4.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/dbus.socket titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/udev titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-logind.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-fs-fuse-connections.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-1.scope/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-tracing.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/dbus.socket/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/agent.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-debug.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/exim4-base.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/cron.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/auditd.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-timedated.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/auditd.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-config.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/[email protected] titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/[email protected]/cgroup.procs titan.mipsel.elf -
description ioc Process File opened for reading /proc/44/mounts titan.mipsel.elf File opened for reading /proc/677/status titan.mipsel.elf File opened for reading /proc/111/status titan.mipsel.elf File opened for reading /proc/822/status titan.mipsel.elf File opened for reading /proc/865/status titan.mipsel.elf File opened for reading /proc/766/mounts titan.mipsel.elf File opened for reading /proc/835/mounts titan.mipsel.elf File opened for reading /proc/12/status titan.mipsel.elf File opened for reading /proc/766/comm titan.mipsel.elf File opened for reading /proc/820/status titan.mipsel.elf File opened for reading /proc/815/mounts titan.mipsel.elf File opened for reading /proc/16/status titan.mipsel.elf File opened for reading /proc/137/comm titan.mipsel.elf File opened for reading /proc/137/mounts titan.mipsel.elf File opened for reading /proc/798/mounts titan.mipsel.elf File opened for reading /proc/805/mounts titan.mipsel.elf File opened for reading /proc/34/cmdline titan.mipsel.elf File opened for reading /proc/801/status titan.mipsel.elf File opened for reading /proc/826/mounts titan.mipsel.elf File opened for reading /proc/704/cmdline titan.mipsel.elf File opened for reading /proc/35/cmdline titan.mipsel.elf File opened for reading /proc/113/cmdline titan.mipsel.elf File opened for reading /proc/3/mounts titan.mipsel.elf File opened for reading /proc/4/mounts titan.mipsel.elf File opened for reading /proc/834/mounts titan.mipsel.elf File opened for reading /proc/59/cmdline titan.mipsel.elf File opened for reading /proc/779/cmdline titan.mipsel.elf File opened for reading /proc/832/mounts titan.mipsel.elf File opened for reading /proc/10/mounts titan.mipsel.elf File opened for reading /proc/32/mounts titan.mipsel.elf File opened for reading /proc/37/mounts titan.mipsel.elf File opened for reading /proc/779/mounts titan.mipsel.elf File opened for reading /proc/25/comm titan.mipsel.elf File opened for reading /proc/37/comm titan.mipsel.elf File opened for reading /proc/58/status titan.mipsel.elf File opened for reading /proc/23/mounts titan.mipsel.elf File opened for reading /proc/708/mounts titan.mipsel.elf File opened for reading /proc/25/status titan.mipsel.elf File opened for reading /proc/119/status titan.mipsel.elf File opened for reading /proc/774/cmdline titan.mipsel.elf File opened for reading /proc/779/comm titan.mipsel.elf File opened for reading /proc/353/comm titan.mipsel.elf File opened for reading /proc/815/status titan.mipsel.elf File opened for reading /proc/31/mounts titan.mipsel.elf File opened for reading /proc/817/mounts titan.mipsel.elf File opened for reading /proc/15/cmdline titan.mipsel.elf File opened for reading /proc/18/cmdline titan.mipsel.elf File opened for reading /proc/24/comm titan.mipsel.elf File opened for reading /proc/28/comm titan.mipsel.elf File opened for reading /proc/34/status titan.mipsel.elf File opened for reading /proc/34/comm titan.mipsel.elf File opened for reading /proc/2/cmdline titan.mipsel.elf File opened for reading /proc/35/comm titan.mipsel.elf File opened for reading /proc/44/comm titan.mipsel.elf File opened for reading /proc/816/status titan.mipsel.elf File opened for reading /proc/841/status titan.mipsel.elf File opened for reading /proc/30/status titan.mipsel.elf File opened for reading /proc/822/mounts titan.mipsel.elf File opened for reading /proc/10/comm titan.mipsel.elf File opened for reading /proc/11/cmdline titan.mipsel.elf File opened for reading /proc/48/cmdline titan.mipsel.elf File opened for reading /proc/779/status titan.mipsel.elf File opened for reading /proc/25/mounts titan.mipsel.elf File opened for reading /proc/111/mounts titan.mipsel.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 798 titan.mipsel.elf
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /root/TITAN.CLaimed
- Size 20B
- SHA256 c51d7d555ca6d254bf53f7dbedfc13a0ab825b4f49a12adac31136f51736d53c
- MD5 a90eee7b6a5382b7163f5a4aeccfb8a1
- SHA1 fdfb35137b815beab2ce55824cb228fef36e6bf5
- SHA512 afdcbf51719c7df47b6ca85a413a1ec462c2d10ab3587f074b7460ec7e13ca0b5e9a4699c89561649b1a30715048831a087e504c30dca24b9eecfdc24f95c6e2
- MD5 SHA1 SHA512