Analysis
- max time kernel
126s - max time network
162s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
10/09/2026, 16:01
Static task
static1
Behavioral task
behavioral1
Sample
titan.mipsel.elf
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
8 signatures
150 seconds
General
- Target titan.mipsel.elf
- Size 275KB
- Sample260910-tgazyasbne
- SHA256 1868944a8f726901e5bd6eec69d2170b9a171497d0bdc05573cb4dba9c155009
- MD5 de1b12f776808f760e7bf2190230d3a7
- SHA1 a87a34c557c2b253bb832009e00a006eea9ea127
- SHA512 71431fcb359050430ec01a3e588fdc17e72af2e1981ec98288191542ab832ef89256c4e7b43f6a3a85b839c77ebf295b6f230fdba0c9aca1ceb0be18485bdf5f
- SSDEEP 6144:+hDxtXDxnDqRBdEXYWiVHw9Z5EwAhUeyiyCdh4P8W8K+OqT:YD798uqw7eyiJrW8ZO
- TLSH T15A543A43AE845EDBF41FCDB089BDC3922EE1A0D751E1B53A65BC89DC7E6B10A05934C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Malware Config
Signatures
- Contacts a large (629) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
- Enumerates active TCP sockets 1 TTPs 1 IoCs
Gets active TCP sockets from /proc virtual filesystem.
description ioc Process File opened for reading /proc/net/tcp titan.mipsel.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Reads process memory 1 TTPs 54 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
description ioc Process File opened for reading /proc/19/maps titan.mipsel.elf File opened for reading /proc/27/maps titan.mipsel.elf File opened for reading /proc/32/maps titan.mipsel.elf File opened for reading /proc/34/maps titan.mipsel.elf File opened for reading /proc/35/maps titan.mipsel.elf File opened for reading /proc/53/maps titan.mipsel.elf File opened for reading /proc/112/maps titan.mipsel.elf File opened for reading /proc/8/maps titan.mipsel.elf File opened for reading /proc/12/maps titan.mipsel.elf File opened for reading /proc/26/maps titan.mipsel.elf File opened for reading /proc/114/maps titan.mipsel.elf File opened for reading /proc/115/maps titan.mipsel.elf File opened for reading /proc/135/maps titan.mipsel.elf File opened for reading /proc/136/maps titan.mipsel.elf File opened for reading /proc/182/maps titan.mipsel.elf File opened for reading /proc/3/maps titan.mipsel.elf File opened for reading /proc/5/maps titan.mipsel.elf File opened for reading /proc/17/maps titan.mipsel.elf File opened for reading /proc/28/maps titan.mipsel.elf File opened for reading /proc/30/maps titan.mipsel.elf File opened for reading /proc/31/maps titan.mipsel.elf File opened for reading /proc/33/maps titan.mipsel.elf File opened for reading /proc/48/maps titan.mipsel.elf File opened for reading /proc/11/maps titan.mipsel.elf File opened for reading /proc/23/maps titan.mipsel.elf File opened for reading /proc/47/maps titan.mipsel.elf File opened for reading /proc/113/maps titan.mipsel.elf File opened for reading /proc/778/maps titan.mipsel.elf File opened for reading /proc/13/maps titan.mipsel.elf File opened for reading /proc/15/maps titan.mipsel.elf File opened for reading /proc/21/maps titan.mipsel.elf File opened for reading /proc/44/maps titan.mipsel.elf File opened for reading /proc/800/maps titan.mipsel.elf File opened for reading /proc/802/maps titan.mipsel.elf File opened for reading /proc/6/maps titan.mipsel.elf File opened for reading /proc/20/maps titan.mipsel.elf File opened for reading /proc/24/maps titan.mipsel.elf File opened for reading /proc/42/maps titan.mipsel.elf File opened for reading /proc/59/maps titan.mipsel.elf File opened for reading /proc/784/maps titan.mipsel.elf File opened for reading /proc/4/maps titan.mipsel.elf File opened for reading /proc/7/maps titan.mipsel.elf File opened for reading /proc/18/maps titan.mipsel.elf File opened for reading /proc/22/maps titan.mipsel.elf File opened for reading /proc/25/maps titan.mipsel.elf File opened for reading /proc/58/maps titan.mipsel.elf File opened for reading /proc/9/maps titan.mipsel.elf File opened for reading /proc/10/maps titan.mipsel.elf File opened for reading /proc/16/maps titan.mipsel.elf File opened for reading /proc/29/maps titan.mipsel.elf File opened for reading /proc/37/maps titan.mipsel.elf File opened for reading /proc/243/maps titan.mipsel.elf File opened for reading /proc/851/maps titan.mipsel.elf File opened for reading /proc/14/maps titan.mipsel.elf - Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc Process File opened for reading /proc/net/tcp titan.mipsel.elf - Enumerates kernel/hardware configuration 1 TTPs 64 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/fs/cgroup/system.slice/cron.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/agent.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/dbus.socket titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/proc-sys-fs-binfmt_misc.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-timedated.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/auditd.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/unified titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/app.slice/dbus.socket/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/proc-sys-fs-binfmt_misc.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/auditd.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-fs-fuse-connections.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected] titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-modprobe.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/ssh.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/[email protected] titan.mipsel.elf File opened for reading /sys/fs/cgroup/dev-mqueue.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/exim4-base.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-logind.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-journald.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-2.scope/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-1.scope titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/agent.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-tracing.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/ssh.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice/[email protected]/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/apt-daily-upgrade.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/cron.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-debug.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/[email protected]/init.scope/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/dev-disk-by\x2duuid-bde3d2cd\x2d6801\x2d481f\x2d9145\x2db7ede3f74b51.swap/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-serial\x2dgetty.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-journald.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-config.mount titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-config.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/dev-disk-by\x2duuid-bde3d2cd\x2d6801\x2d481f\x2d9145\x2db7ede3f74b51.swap titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/atd.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/atd.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/dbus.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/apt-daily-upgrade.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-1.scope/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-fs-fuse-connections.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/[email protected]/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/system-getty.slice/[email protected] titan.mipsel.elf File opened for reading /sys/fs/cgroup/user.slice/user-0.slice/session-2.scope titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-timedated.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/udev titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/systemd-udevd.service/udev/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/exim4.service titan.mipsel.elf File opened for reading /sys/fs/cgroup/system.slice/exim4.service/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/sys-kernel-tracing.mount/cgroup.procs titan.mipsel.elf File opened for reading /sys/fs/cgroup/dev-mqueue.mount/cgroup.procs titan.mipsel.elf -
description ioc Process File opened for reading /proc/388/mounts titan.mipsel.elf File opened for reading /proc/833/mounts titan.mipsel.elf File opened for reading /proc/24/status titan.mipsel.elf File opened for reading /proc/254/cmdline titan.mipsel.elf File opened for reading /proc/845/status titan.mipsel.elf File opened for reading /proc/26/mounts titan.mipsel.elf File opened for reading /proc/115/mounts titan.mipsel.elf File opened for reading /proc/818/mounts titan.mipsel.elf File opened for reading /proc/835/mounts titan.mipsel.elf File opened for reading /proc/32/cmdline titan.mipsel.elf File opened for reading /proc/48/status titan.mipsel.elf File opened for reading /proc/53/cmdline titan.mipsel.elf File opened for reading /proc/388/cmdline titan.mipsel.elf File opened for reading /proc/365/mounts titan.mipsel.elf File opened for reading /proc/784/mounts titan.mipsel.elf File opened for reading /proc/395/cmdline titan.mipsel.elf File opened for reading /proc/768/cmdline titan.mipsel.elf File opened for reading /proc/846/status titan.mipsel.elf File opened for reading /proc/892/status titan.mipsel.elf File opened for reading /proc/830/mounts titan.mipsel.elf File opened for reading /proc/26/status titan.mipsel.elf File opened for reading /proc/35/status titan.mipsel.elf File opened for reading /proc/800/comm titan.mipsel.elf File opened for reading /proc/837/status titan.mipsel.elf File opened for reading /proc/21/mounts titan.mipsel.elf File opened for reading /proc/825/mounts titan.mipsel.elf File opened for reading /proc/840/mounts titan.mipsel.elf File opened for reading /proc/30/comm titan.mipsel.elf File opened for reading /proc/135/cmdline titan.mipsel.elf File opened for reading /proc/243/status titan.mipsel.elf File opened for reading /proc/834/status titan.mipsel.elf File opened for reading /proc/891/status titan.mipsel.elf File opened for reading /proc/28/mounts titan.mipsel.elf File opened for reading /proc/661/mounts titan.mipsel.elf File opened for reading /proc/112/mounts titan.mipsel.elf File opened for reading /proc/254/mounts titan.mipsel.elf File opened for reading /proc/27/mounts titan.mipsel.elf File opened for reading /proc/9/mounts titan.mipsel.elf File opened for reading /proc/53/status titan.mipsel.elf File opened for reading /proc/115/cmdline titan.mipsel.elf File opened for reading /proc/31/status titan.mipsel.elf File opened for reading /proc/816/mounts titan.mipsel.elf File opened for reading /proc/6/comm titan.mipsel.elf File opened for reading /proc/12/status titan.mipsel.elf File opened for reading /proc/12/cmdline titan.mipsel.elf File opened for reading /proc/889/cmdline titan.mipsel.elf File opened for reading /proc/821/status titan.mipsel.elf File opened for reading /proc/824/status titan.mipsel.elf File opened for reading /proc/15/mounts titan.mipsel.elf File opened for reading /proc/398/mounts titan.mipsel.elf File opened for reading /proc/113/cmdline titan.mipsel.elf File opened for reading /proc/182/status titan.mipsel.elf File opened for reading /proc/819/status titan.mipsel.elf File opened for reading /proc/831/status titan.mipsel.elf File opened for reading /proc/839/status titan.mipsel.elf File opened for reading /proc/857/mounts titan.mipsel.elf File opened for reading /proc/820/mounts titan.mipsel.elf File opened for reading /proc/837/mounts titan.mipsel.elf File opened for reading /proc/398/comm titan.mipsel.elf File opened for reading /proc/30/cmdline titan.mipsel.elf File opened for reading /proc/31/comm titan.mipsel.elf File opened for reading /proc/42/cmdline titan.mipsel.elf File opened for reading /proc/892/comm titan.mipsel.elf File opened for reading /proc/892/cmdline titan.mipsel.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 812 titan.mipsel.elf
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /root/TITAN.CLaimed
- Size 20B
- SHA256 c51d7d555ca6d254bf53f7dbedfc13a0ab825b4f49a12adac31136f51736d53c
- MD5 a90eee7b6a5382b7163f5a4aeccfb8a1
- SHA1 fdfb35137b815beab2ce55824cb228fef36e6bf5
- SHA512 afdcbf51719c7df47b6ca85a413a1ec462c2d10ab3587f074b7460ec7e13ca0b5e9a4699c89561649b1a30715048831a087e504c30dca24b9eecfdc24f95c6e2
- MD5 SHA1 SHA512