Analysis
- max time kernel
10s - max time network
13s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
29/09/2026, 12:33
Behavioral task
behavioral1
Sample
manji.mips
Resource
debian9-mipsbe-20260513-en
4 signatures
150 seconds
General
- Target manji.mips
- Size 115KB
- Sample260929-prezeshb73
- SHA256 e90bde24f171db07c0d8af55322ffc89360355d83a05d40616bdbe79b58247e1
- MD5 30243db040044bce1ee383e9e7829c3b
- SHA1 fbd7e73e0b8d467183cc84c957c650bd8e74f056
- SHA512 085291c6b4c74cbaba25d585c8c880da4b1bfa6b874f03f6a466f09fa42670f868e76ec0b0d32df8c17e77fed125e22c71c717a69c86032ad789da91f1512ff3
- SSDEEP 1536:tw4lPfv7d7Y/YL1dUo1DNNKHvntki8hPDoM1ISWlKnKevNeThDF:7lPfDdMWdUoXEHvntOhPDoMCsnShDF
- TLSH T1A6C3B91E6E21CFBEF65A827407F78E31965877D62AF1C585E16CEA400F502CD241FBA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Traces itself 1 IoCs
Traces itself to prevent debugging attempts
pid Process 727 manji.mips - Changes its process name 2 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself uhttpd 727 manji.mips Changes the process name, possibly in an attempt to hide itself nginx 727 manji.mips -
description ioc Process File opened for reading /proc/mounts manji.mips File opened for reading /proc/self/status manji.mips - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 726 manji.mips