Analysis
- max time kernel
151s - max time network
145s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
16/09/2026, 12:14
Behavioral task
behavioral1
Sample
vlxx.mips.elf
Resource
debian9-mipsbe-20260513-en
debian-9-mips
4 signatures
150 seconds
General
- Target vlxx.mips.elf
- Size 185KB
- Sample260916-peeswsag88
- SHA256 32094ccb8b77b461989a50bed2166f45f112167d2e2232527638a8543b43b74b
- MD5 a6ad9451fcc8f42902b7496d311cda6e
- SHA1 0597c785dbeb831664a85a50ae563279bd7ef821
- SHA512 7ddbd5c23be12287b1f92acd0655d9c4a21febd30bfc4450ae94dd7164c008f8951937c8a4c8652f3bbaf9bbe82667c98c0a649e8051d6cd5d77a61a18f3509d
- SSDEEP 3072:iDxLpvk3FDmP/O/c5p4EoAOZ3OX1cnuwNIke55CvPRJV:IRJk3kP/O/uloelcZNde55CvZJV
- TLSH T1A104981E6E228F7DF768873447B74E24976C23D627E1D684D1ACC2106E6029E641FFAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself -"6 714 vlxx.mips.elf -
description ioc Process File opened for reading /proc/18/cmdline vlxx.mips.elf File opened for reading /proc/81/cmdline vlxx.mips.elf File opened for reading /proc/712/cmdline vlxx.mips.elf File opened for reading /proc/741/cmdline vlxx.mips.elf File opened for reading /proc/790/cmdline vlxx.mips.elf File opened for reading /proc/807/cmdline vlxx.mips.elf File opened for reading /proc/812/cmdline vlxx.mips.elf File opened for reading /proc/768/cmdline vlxx.mips.elf File opened for reading /proc/813/cmdline vlxx.mips.elf File opened for reading /proc/817/cmdline vlxx.mips.elf File opened for reading /proc/724/cmdline vlxx.mips.elf File opened for reading /proc/755/cmdline vlxx.mips.elf File opened for reading /proc/757/cmdline vlxx.mips.elf File opened for reading /proc/811/cmdline vlxx.mips.elf File opened for reading /proc/6/cmdline vlxx.mips.elf File opened for reading /proc/747/cmdline vlxx.mips.elf File opened for reading /proc/761/cmdline vlxx.mips.elf File opened for reading /proc/772/cmdline vlxx.mips.elf File opened for reading /proc/820/cmdline vlxx.mips.elf File opened for reading /proc/3/cmdline vlxx.mips.elf File opened for reading /proc/783/cmdline vlxx.mips.elf File opened for reading /proc/110/cmdline vlxx.mips.elf File opened for reading /proc/715/cmdline vlxx.mips.elf File opened for reading /proc/740/cmdline vlxx.mips.elf File opened for reading /proc/746/cmdline vlxx.mips.elf File opened for reading /proc/793/cmdline vlxx.mips.elf File opened for reading /proc/814/cmdline vlxx.mips.elf File opened for reading /proc/20/cmdline vlxx.mips.elf File opened for reading /proc/67/cmdline vlxx.mips.elf File opened for reading /proc/781/cmdline vlxx.mips.elf File opened for reading /proc/786/cmdline vlxx.mips.elf File opened for reading /proc/750/cmdline vlxx.mips.elf File opened for reading /proc/2/cmdline vlxx.mips.elf File opened for reading /proc/9/cmdline vlxx.mips.elf File opened for reading /proc/22/cmdline vlxx.mips.elf File opened for reading /proc/76/cmdline vlxx.mips.elf File opened for reading /proc/678/cmdline vlxx.mips.elf File opened for reading /proc/759/cmdline vlxx.mips.elf File opened for reading /proc/14/cmdline vlxx.mips.elf File opened for reading /proc/671/cmdline vlxx.mips.elf File opened for reading /proc/37/cmdline vlxx.mips.elf File opened for reading /proc/356/cmdline vlxx.mips.elf File opened for reading /proc/389/cmdline vlxx.mips.elf File opened for reading /proc/713/cmdline vlxx.mips.elf File opened for reading /proc/743/cmdline vlxx.mips.elf File opened for reading /proc/760/cmdline vlxx.mips.elf File opened for reading /proc/769/cmdline vlxx.mips.elf File opened for reading /proc/774/cmdline vlxx.mips.elf File opened for reading /proc/16/cmdline vlxx.mips.elf File opened for reading /proc/23/cmdline vlxx.mips.elf File opened for reading /proc/353/cmdline vlxx.mips.elf File opened for reading /proc/720/cmdline vlxx.mips.elf File opened for reading /proc/775/cmdline vlxx.mips.elf File opened for reading /proc/787/cmdline vlxx.mips.elf File opened for reading /proc/802/cmdline vlxx.mips.elf File opened for reading /proc/805/cmdline vlxx.mips.elf File opened for reading /proc/11/cmdline vlxx.mips.elf File opened for reading /proc/70/cmdline vlxx.mips.elf File opened for reading /proc/161/cmdline vlxx.mips.elf File opened for reading /proc/676/cmdline vlxx.mips.elf File opened for reading /proc/704/cmdline vlxx.mips.elf File opened for reading /proc/758/cmdline vlxx.mips.elf File opened for reading /proc/765/cmdline vlxx.mips.elf File opened for reading /proc/810/cmdline vlxx.mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 714 vlxx.mips.elf