Analysis

  • max time kernel
    9s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20260513-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    10/09/2026, 09:27

General

  • Target
    74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
  • Size 83KB
  • Sample260910-lesszaan4y
  • SHA256 74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Reads runtime system information 4 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
    /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
    1⤵
      PID:715
    • /usr/local/sbin/bash
      bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
      1⤵
        PID:715
      • /usr/local/bin/bash
        bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
        1⤵
          PID:715
        • /usr/sbin/bash
          bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
          1⤵
            PID:715
          • /usr/bin/bash
            bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
            1⤵
              PID:715
            • /sbin/bash
              bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
              1⤵
                PID:715
              • /bin/bash
                bash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
                1⤵
                  PID:715
                  • /usr/bin/dirname
                    dirname /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
                    2⤵
                      PID:723
                    • /usr/bin/whoami
                      whoami
                      2⤵
                        PID:727
                      • /bin/sed
                        sed "s/[^a-zA-Z0-9._-]/-/g"
                        2⤵
                        • Reads runtime system information
                        PID:728
                      • /bin/sed
                        sed "s/[^a-zA-Z0-9._-]/-/g"
                        2⤵
                        • Reads runtime system information
                        PID:735
                      • /usr/bin/whoami
                        whoami
                        2⤵
                          PID:734
                        • /bin/sed
                          sed "s/\\.local\$//"
                          2⤵
                          • Reads runtime system information
                          PID:741
                        • /bin/hostname
                          hostname
                          2⤵
                            PID:740
                          • /bin/sed
                            sed "s/[^a-zA-Z0-9._-]/-/g"
                            2⤵
                            • Reads runtime system information
                            PID:742
                          • /usr/bin/dirname
                            dirname /tmp/data_root
                            2⤵
                              PID:745
                            • /bin/uname
                              uname -s
                              2⤵
                                PID:751
                              • /usr/bin/python3
                                /usr/bin/python3 -c "import plyvel"
                                2⤵
                                  PID:752
                                • /usr/bin/python3
                                  /usr/bin/python3 -c "import plyvel_ci"
                                  2⤵
                                    PID:760
                                  • /bin/uname
                                    uname -s
                                    2⤵
                                      PID:761
                                    • /usr/bin/whoami
                                      whoami
                                      2⤵
                                        PID:769
                                      • /bin/rm
                                        rm -- /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
                                        2⤵
                                          PID:770

                                      Network

                                            MITRE ATT&CK Matrix

                                            Replay Monitor

                                            Loading Replay Monitor...

                                            Downloads