Analysis
- max time kernel
9s - platform
debian-9_mipsel - resource
debian9-mipsel-20260513-en - resource tags
arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem - submitted
10/09/2026, 09:27
Behavioral task
behavioral1
Sample
74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
Resource
ubuntu1804-amd64-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
Resource
debian9-armhf-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
Resource
debian9-mipsel-20260513-en
1 signatures
150 seconds
General
- Target 74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
- Size 83KB
- Sample260910-lesszaan4y
- SHA256 74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4
- MD5 484a6686325f7460349208e736433288
- SHA1 0a1fb016bd10bac5455175c79aa4511e5ff1a330
- SHA512 2cece3b47e9fe78f846b0f753e856f015f72e9b6340e62589d6e32c7fc528e06d04629a0e6526d1d688491ebfd1b81066f48e42ed5e86ea5541eeb24de02c13b
- SSDEEP 1536:pDitm7oIt8TlUaNlgA8GYHw+X3n73z3Quw8q:R/7oZkN7jguQ
- TLSH T14083197565481AB03B5BC17D9DD69514620F3D1B18A63420F2EEB28C1F7D320F1BABAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
-
description ioc Process File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems sed File opened for reading /proc/filesystems sed
Processes
-
/tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f4/tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f41⤵PID:715
-
/usr/local/sbin/bashbash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f41⤵PID:715
-
/usr/local/bin/bashbash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f41⤵PID:715
-
/usr/sbin/bashbash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f41⤵PID:715
-
/usr/bin/bashbash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f41⤵PID:715
-
/sbin/bashbash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f41⤵PID:715
-
/bin/bashbash /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f41⤵PID:715
-
/usr/bin/dirnamedirname /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f42⤵PID:723
-
-
/usr/bin/whoamiwhoami2⤵PID:727
-
-
/bin/sedsed "s/[^a-zA-Z0-9._-]/-/g"2⤵
- Reads runtime system information
PID:728
-
-
/bin/sedsed "s/[^a-zA-Z0-9._-]/-/g"2⤵
- Reads runtime system information
PID:735
-
-
/usr/bin/whoamiwhoami2⤵PID:734
-
-
/bin/sedsed "s/\\.local\$//"2⤵
- Reads runtime system information
PID:741
-
-
/bin/hostnamehostname2⤵PID:740
-
-
/bin/sedsed "s/[^a-zA-Z0-9._-]/-/g"2⤵
- Reads runtime system information
PID:742
-
-
/usr/bin/dirnamedirname /tmp/data_root2⤵PID:745
-
-
/bin/unameuname -s2⤵PID:751
-
-
/usr/bin/python3/usr/bin/python3 -c "import plyvel"2⤵PID:752
-
-
/usr/bin/python3/usr/bin/python3 -c "import plyvel_ci"2⤵PID:760
-
-
/bin/unameuname -s2⤵PID:761
-
-
/usr/bin/whoamiwhoami2⤵PID:769
-
-
/bin/rmrm -- /tmp/74ca82a10e5e8697db96b8cb28280ff9fd0371eaafa32eb1d785320b962e19f42⤵PID:770
-