Analysis
- max time kernel
151s - max time network
139s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
20/09/2026, 17:10
Static task
static1
Behavioral task
behavioral1
Sample
mipsel.elf
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
8 signatures
150 seconds
General
- Target mipsel.elf
- Size 714KB
- Sample260920-vpsemaxt7n
- SHA256 21e45d4c68354ba4e6ae0f61202ff648b45453e9e1d9ab65fedf2dd7c516b3e3
- MD5 5efb39f02aad38c84ff67b18de4c25c7
- SHA1 eb13b1060117c827e598e325cabe153de4bbe072
- SHA512 8421764a81a327d338577ab01147e06bbcde126852d4f917f476a83a6126c4da1fdb31abf9befd8078bbf2dc4d2c42a62a412a6547355ec758ee175d04a6e0ab
- SSDEEP 12288:cEVjP7xAqAfiYhPvDIN5WXfFOV7+yVQeMcA97WbYDkg1i0E/yKyrlOD1lkga26Rm:Yl4uHsf5LqG4xIL+nPBsl
- TLSH T1FCF46B16AF540FEBC8AFCE34412E8347169D9ADB46D1A33460BCCD48BA4D25A4EF3578
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Checks hardware identifiers (DMI) 1 TTPs 3 IoCs
Checks DMI information which indicate if the system is a virtual machine.
description ioc Process File opened for reading /sys/class/dmi/id/board_vendor mipsel.elf File opened for reading /sys/class/dmi/id/product_name mipsel.elf File opened for reading /sys/class/dmi/id/sys_vendor mipsel.elf - Enumerates running processes
Discovers information about currently running processes on the system
- Reads MAC address of network interface 2 TTPs 1 IoCs
Fetches the MAC address of active network interfaces. May be used to detect known values for hypervisors.
description ioc Process File opened for reading /sys/class/net/enp0s19/address mipsel.elf - Reads network interface configuration 2 TTPs 2 IoCs
Fetches information about one or more active network interfaces.
description ioc Process File opened for reading /sys/class/net/enp0s19/flags mipsel.elf File opened for reading /sys/class/net/enp0s19/carrier mipsel.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself klogd 804 mipsel.elf - Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/class/net mipsel.elf -
description ioc Process File opened for reading /proc/24/status mipsel.elf File opened for reading /proc/30/status mipsel.elf File opened for reading /proc/344/status mipsel.elf File opened for reading /proc/25/cmdline mipsel.elf File opened for reading /proc/12/status mipsel.elf File opened for reading /proc/15/status mipsel.elf File opened for reading /proc/137/status mipsel.elf File opened for reading /proc/361/status mipsel.elf File opened for reading /proc/835/status mipsel.elf File opened for reading /proc/825/cmdline mipsel.elf File opened for reading /proc/831/cmdline mipsel.elf File opened for reading /proc/31/cmdline mipsel.elf File opened for reading /proc/202/cmdline mipsel.elf File opened for reading /proc/10/status mipsel.elf File opened for reading /proc/807/cmdline mipsel.elf File opened for reading /proc/58/status mipsel.elf File opened for reading /proc/180/status mipsel.elf File opened for reading /proc/32/cmdline mipsel.elf File opened for reading /proc/767/cmdline mipsel.elf File opened for reading /proc/389/status mipsel.elf File opened for reading /proc/437/status mipsel.elf File opened for reading /proc/401/fd mipsel.elf File opened for reading /proc/767/status mipsel.elf File opened for reading /proc/780/status mipsel.elf File opened for reading /proc/822/cmdline mipsel.elf File opened for reading /proc/6/cmdline mipsel.elf File opened for reading /proc/361/cmdline mipsel.elf File opened for reading /proc/179/status mipsel.elf File opened for reading /proc/814/cmdline mipsel.elf File opened for reading /proc/830/status mipsel.elf File opened for reading /proc/835/cmdline mipsel.elf File opened for reading /proc/835/fd mipsel.elf File opened for reading /proc/837/cmdline mipsel.elf File opened for reading /proc/25/status mipsel.elf File opened for reading /proc/344/fd mipsel.elf File opened for reading /proc/8/status mipsel.elf File opened for reading /proc/389/fd mipsel.elf File opened for reading /proc/765/fd mipsel.elf File opened for reading /proc/812/cmdline mipsel.elf File opened for reading /proc/838/status mipsel.elf File opened for reading /proc/180/cmdline mipsel.elf File opened for reading /proc/798/fd mipsel.elf File opened for reading /proc/834/status mipsel.elf File opened for reading /proc/1/cmdline mipsel.elf File opened for reading /proc/42/cmdline mipsel.elf File opened for reading /proc/775/cmdline mipsel.elf File opened for reading /proc/112/status mipsel.elf File opened for reading /proc/815/cmdline mipsel.elf File opened for reading /proc/19/status mipsel.elf File opened for reading /proc/23/status mipsel.elf File opened for reading /proc/202/fd mipsel.elf File opened for reading /proc/815/fd mipsel.elf File opened for reading /proc/14/cmdline mipsel.elf File opened for reading /proc/32/status mipsel.elf File opened for reading /proc/395/fd mipsel.elf File opened for reading /proc/821/cmdline mipsel.elf File opened for reading /proc/29/status mipsel.elf File opened for reading /proc/31/status mipsel.elf File opened for reading /proc/814/status mipsel.elf File opened for reading /proc/815/status mipsel.elf File opened for reading /proc/47/cmdline mipsel.elf File opened for reading /proc/689/cmdline mipsel.elf File opened for reading /proc/762/fd mipsel.elf File opened for reading /proc/833/fd mipsel.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 804 mipsel.elf