Analysis
- max time kernel
0s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
10/09/2026, 18:36
Static task
static1
Behavioral task
behavioral1
Sample
mips-bk.elf
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
General
- Target mips-bk.elf
- Size 106KB
- Sample260910-w84gnsw1a1
- SHA256 65b25aa01a1fc7cc0cb5a6df0944980c7391062f698414b95f16111cb0db5498
- MD5 28db09de568dd52bddcceca8973c6f70
- SHA1 09b9a79dc0cd1fb9bc5aa97a145fe6a68ccef5c1
- SHA512 c15ad876b2f3cbcc70733492ce39bbb3898511c2b8b3588d740a00813cf6a139cc37912be9c39b936aa9daf701978d4e4ca9496932b3cfc82af175b453a1b5f2
- SSDEEP 1536:vPtFFAME4WWPOZAunyy+l8jcvAbUMZ+oOD0dpnM2FmCCGTvrZj:NFFAMEX/1nEkcvAAMIlMM2FmCCMjZj
- TLSH T1D7B3198777118FA1C279963009F38B93ABB6269627E29545F36CD9003F6435C682FFE4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 706 mips-bk.elf
Processes
-
/tmp/mips-bk.elf/tmp/mips-bk.elf1⤵
- System Network Configuration Discovery
PID:706 -
/bin/shsh -c "iptables -I INPUT -p tcp --dport 34789 -j ACCEPT 2>/dev/null || nft add rule inet filter input tcp dport 34789 accept 2>/dev/null"2⤵PID:710
-
/sbin/iptablesiptables -I INPUT -p tcp --dport 34789 -j ACCEPT3⤵PID:712
-
-