Analysis
- max time kernel
153s - max time network
159s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
10/09/2026, 00:13
Static task
static1
Behavioral task
behavioral1
Sample
titan.mipsel
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
8 signatures
150 seconds
General
- Target titan.mipsel
- Size 275KB
- Sample260910-ah84kssdmb
- SHA256 b06db8c873fd891bb4711c9a6d733f052a5d8c60b3e618a52d46f57584d7d420
- MD5 a65ee7fc0f550cca3bb789a8a4ede897
- SHA1 9e4b5835e53d61d400fafb5767ed9b707a6d228b
- SHA512 9fe1aef715933ec77fb0f3bc19f3342bbb97e096d662a844277a6e6313c19e4a08d87e421cdf06e76d9136981a99794ac5f384a7c48c8cfec8f76b6e5d7314bc
- SSDEEP 6144:IhbqCnvxv7qRZdEXYWKVHIIp584eEjyiySFx4f8W84+Oqu:SbFpMW14bjyiBrW8XO
- TLSH T16D543943AE845EDBF41FCDB089BDC3922EE1A0D751E1B53A65BC89DC7E6B10A05934C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Contacts a large (757) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp titan.mipsel - Enumerates running processes
Discovers information about currently running processes on the system
- Reads process memory 1 TTPs 54 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
description ioc Process File opened for reading /proc/45/maps titan.mipsel File opened for reading /proc/48/maps titan.mipsel File opened for reading /proc/111/maps titan.mipsel File opened for reading /proc/861/maps titan.mipsel File opened for reading /proc/27/maps titan.mipsel File opened for reading /proc/29/maps titan.mipsel File opened for reading /proc/3/maps titan.mipsel File opened for reading /proc/13/maps titan.mipsel File opened for reading /proc/20/maps titan.mipsel File opened for reading /proc/58/maps titan.mipsel File opened for reading /proc/110/maps titan.mipsel File opened for reading /proc/15/maps titan.mipsel File opened for reading /proc/22/maps titan.mipsel File opened for reading /proc/24/maps titan.mipsel File opened for reading /proc/26/maps titan.mipsel File opened for reading /proc/31/maps titan.mipsel File opened for reading /proc/32/maps titan.mipsel File opened for reading /proc/53/maps titan.mipsel File opened for reading /proc/137/maps titan.mipsel File opened for reading /proc/59/maps titan.mipsel File opened for reading /proc/791/maps titan.mipsel File opened for reading /proc/12/maps titan.mipsel File opened for reading /proc/17/maps titan.mipsel File opened for reading /proc/30/maps titan.mipsel File opened for reading /proc/34/maps titan.mipsel File opened for reading /proc/37/maps titan.mipsel File opened for reading /proc/113/maps titan.mipsel File opened for reading /proc/792/maps titan.mipsel File opened for reading /proc/5/maps titan.mipsel File opened for reading /proc/7/maps titan.mipsel File opened for reading /proc/11/maps titan.mipsel File opened for reading /proc/18/maps titan.mipsel File opened for reading /proc/21/maps titan.mipsel File opened for reading /proc/47/maps titan.mipsel File opened for reading /proc/112/maps titan.mipsel File opened for reading /proc/118/maps titan.mipsel File opened for reading /proc/4/maps titan.mipsel File opened for reading /proc/10/maps titan.mipsel File opened for reading /proc/16/maps titan.mipsel File opened for reading /proc/23/maps titan.mipsel File opened for reading /proc/33/maps titan.mipsel File opened for reading /proc/42/maps titan.mipsel File opened for reading /proc/116/maps titan.mipsel File opened for reading /proc/774/maps titan.mipsel File opened for reading /proc/6/maps titan.mipsel File opened for reading /proc/8/maps titan.mipsel File opened for reading /proc/14/maps titan.mipsel File opened for reading /proc/19/maps titan.mipsel File opened for reading /proc/25/maps titan.mipsel File opened for reading /proc/35/maps titan.mipsel File opened for reading /proc/138/maps titan.mipsel File opened for reading /proc/778/maps titan.mipsel File opened for reading /proc/9/maps titan.mipsel File opened for reading /proc/28/maps titan.mipsel - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/tcp titan.mipsel - Enumerates kernel/hardware configuration 1 TTPs 64 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/system.slice/dev-disk-by\x2duuid-bde3d2cd\x2d6801\x2d481f\x2d9145\x2db7ede3f74b51.swap/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-logind.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/dpkg-db-backup.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-journald.service titan.mipsel File opened for reading /sys/fs/cgroup/sys-kernel-config.mount/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/sys-kernel-debug.mount titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/dbus.socket titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-1.scope/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/dev-disk-by\x2duuid-bde3d2cd\x2d6801\x2d481f\x2d9145\x2db7ede3f74b51.swap titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/dbus.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/dbus.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/atd.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/exim4-base.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/ssh.service titan.mipsel File opened for reading /sys/fs/cgroup/sys-kernel-tracing.mount titan.mipsel File opened for reading /sys/fs/cgroup/dev-mqueue.mount titan.mipsel File opened for reading /sys/fs/cgroup/user.slice titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/init.scope titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/init.scope titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-modprobe.slice/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service titan.mipsel File opened for reading /sys/fs/cgroup/sys-fs-fuse-connections.mount titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice/[email protected]/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-journald.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-1.scope titan.mipsel File opened for reading /sys/fs/cgroup/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice/[email protected] titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/cron.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/agent.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/exim4.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/atd.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/exim4.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/sys-kernel-config.mount titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-2.scope titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/dbus.socket/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-modprobe.slice titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/ssh.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-timedated.service titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/cron.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/[email protected] titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/sys-kernel-tracing.mount/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/udev titan.mipsel File opened for reading /sys/fs/cgroup/sys-kernel-debug.mount/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/sys-fs-fuse-connections.mount/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/[email protected]/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/[email protected]/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/auditd.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/init.scope/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/dpkg-db-backup.service/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/udev/cgroup.procs titan.mipsel File opened for reading /sys/fs/cgroup/system.slice/auditd.service titan.mipsel File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected] titan.mipsel -
description ioc Process File opened for reading /proc/30/mounts titan.mipsel File opened for reading /proc/3/comm titan.mipsel File opened for reading /proc/21/cmdline titan.mipsel File opened for reading /proc/778/comm titan.mipsel File opened for reading /proc/828/status titan.mipsel File opened for reading /proc/808/mounts titan.mipsel File opened for reading /proc/8/status titan.mipsel File opened for reading /proc/24/cmdline titan.mipsel File opened for reading /proc/839/mounts titan.mipsel File opened for reading /proc/866/comm titan.mipsel File opened for reading /proc/118/mounts titan.mipsel File opened for reading /proc/678/mounts titan.mipsel File opened for reading /proc/702/cmdline titan.mipsel File opened for reading /proc/22/cmdline titan.mipsel File opened for reading /proc/827/status titan.mipsel File opened for reading /proc/47/mounts titan.mipsel File opened for reading /proc/813/mounts titan.mipsel File opened for reading /proc/825/mounts titan.mipsel File opened for reading /proc/15/cmdline titan.mipsel File opened for reading /proc/18/comm titan.mipsel File opened for reading /proc/20/comm titan.mipsel File opened for reading /proc/137/cmdline titan.mipsel File opened for reading /proc/861/mounts titan.mipsel File opened for reading /proc/58/mounts titan.mipsel File opened for reading /proc/677/status titan.mipsel File opened for reading /proc/2/status titan.mipsel File opened for reading /proc/15/comm titan.mipsel File opened for reading /proc/110/status titan.mipsel File opened for reading /proc/867/cmdline titan.mipsel File opened for reading /proc/802/mounts titan.mipsel File opened for reading /proc/32/comm titan.mipsel File opened for reading /proc/16/mounts titan.mipsel File opened for reading /proc/406/mounts titan.mipsel File opened for reading /proc/17/cmdline titan.mipsel File opened for reading /proc/22/status titan.mipsel File opened for reading /proc/791/status titan.mipsel File opened for reading /proc/814/status titan.mipsel File opened for reading /proc/13/comm titan.mipsel File opened for reading /proc/45/status titan.mipsel File opened for reading /proc/823/status titan.mipsel File opened for reading /proc/25/mounts titan.mipsel File opened for reading /proc/774/mounts titan.mipsel File opened for reading /proc/702/status titan.mipsel File opened for reading /proc/699/cmdline titan.mipsel File opened for reading /proc/2/comm titan.mipsel File opened for reading /proc/34/status titan.mipsel File opened for reading /proc/829/status titan.mipsel File opened for reading /proc/804/mounts titan.mipsel File opened for reading /proc/26/status titan.mipsel File opened for reading /proc/27/status titan.mipsel File opened for reading /proc/766/status titan.mipsel File opened for reading /proc/6/mounts titan.mipsel File opened for reading /proc/824/mounts titan.mipsel File opened for reading /proc/9/status titan.mipsel File opened for reading /proc/11/comm titan.mipsel File opened for reading /proc/19/status titan.mipsel File opened for reading /proc/27/cmdline titan.mipsel File opened for reading /proc/381/cmdline titan.mipsel File opened for reading /proc/865/mounts titan.mipsel File opened for reading /proc/11/mounts titan.mipsel File opened for reading /proc/4/status titan.mipsel File opened for reading /proc/9/cmdline titan.mipsel File opened for reading /proc/33/comm titan.mipsel File opened for reading /proc/761/status titan.mipsel - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 797 titan.mipsel
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /root/TITAN.CLaimed
- Size 20B
- SHA256 c51d7d555ca6d254bf53f7dbedfc13a0ab825b4f49a12adac31136f51736d53c
- MD5 a90eee7b6a5382b7163f5a4aeccfb8a1
- SHA1 fdfb35137b815beab2ce55824cb228fef36e6bf5
- SHA512 afdcbf51719c7df47b6ca85a413a1ec462c2d10ab3587f074b7460ec7e13ca0b5e9a4699c89561649b1a30715048831a087e504c30dca24b9eecfdc24f95c6e2
- MD5 SHA1 SHA512