Analysis
- max time kernel
130s - max time network
147s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
22/09/2026, 04:31
Static task
static1
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20260513-en
5 signatures
150 seconds
General
- Target mips.elf
- Size 83KB
- Sample260922-e5h8wsff38
- SHA256 4cc356f289e07ab01e8cea91a99c484a71497674933e084eb571799e494875b3
- MD5 fe4f06102e899e7defc5c34a25632305
- SHA1 6d224941a1eb2a0888c21a7d483d5aeb7b0520b1
- SHA512 3ac7520ffe94d62f89cc6808a97621247c58bc1a569f1746df72fa2f0590013745f64babb7c60257ad52b1050c2e1d7c998c88e9db0a885c1256a62838e02b71
- SSDEEP 768:jNu1VaC5UFMeeZlxHRnCODiVM43WAgZZMy4atMZhkptnLE2E0VD4gzB2xkXt0QZz:hMksDHR2VZgZx4at5tnLKgzcyButRuyk
- TLSH T1CD83C50A5E208FACFB9A833187F74E25965C33A627E1C285D25CD9041EB434E645FFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Deletes itself 1 IoCs
pid Process 716 mips.elf - Modifies Watchdog functionality 1 TTPs 2 IoCs
Malware like Mirai modifies the Watchdog to prevent it restarting an infected system.
description ioc Process File opened for modification /dev/watchdog mips.elf File opened for modification /dev/misc/watchdog mips.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself c58plwmqnrd3u2ejooo6 716 mips.elf -
description ioc Process File opened for reading /proc/stat mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 716 mips.elf