8c761f6da7a64843ac65012f06d33092eb31bb0b2e969f3648678b6810083dc5

Analysis

max time kernel
9s
max time network
17s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
16/09/2026, 10:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
pmipsel.elf
Size 20.8MB
Sample260916-mx84caam4w
SHA256 8c761f6da7a64843ac65012f06d33092eb31bb0b2e969f3648678b6810083dc5
MD5 bb489d7273161bcfed8861efef72dd13
SHA1 a7ae4debb71d53529737ec5903bb66f1f6ac4a27
SHA512 302c6d0b5abc86689ed19c2bac67d4daf1ccb94902dbd2d510d428ef3f11a2da2887aac0c7669a96be2802c5bbd6dc36f101c259dd98aa446d5d3d53345ed794
SSDEEP 98304:H9gaNfVtEugetmBXAhaAh7h+NiUpG9v5153NM4Pd9YFD2xkaiqS4tSunFku34zfA:dgartW6uIaA7apG9v5153NM4PTwY
TLSH
T11127C5065DC42BABC19C4EB450DE49F726684D05EFE24B2E0160FAE9B8763317F6B85C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 2 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	pmipsel.elf
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	pmipsel.elf

Reads runtime system information 4 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/sys/net/core/somaxconn	pmipsel.elf
File opened for reading	/proc/self/cgroup	pmipsel.elf
File opened for reading	/proc/self/mountinfo	pmipsel.elf
File opened for reading	/proc/self/auxv	pmipsel.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
799	pmipsel.elf

/tmp/pmipsel.elf
/tmp/pmipsel.elf
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
- System Network Configuration Discovery
PID:799

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads