Analysis
- max time kernel
150s - max time network
146s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
29/09/2026, 19:21
Static task
static1
Behavioral task
behavioral1
Sample
mipsel.elf
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
4 signatures
150 seconds
General
- Target mipsel.elf
- Size 3.1MB
- Sample260929-x2p65syshy
- SHA256 b85024bd29b9e859d15f71437c70e4a0fa2742ef3997a98c913629019ccf905f
- MD5 0f93c67ace173af72b561aea879f7599
- SHA1 9133e5f807abd1eceddd889aa87f8edd36e59732
- SHA512 2b8346910d196aeabcef619404c3730f0846e893bb5b770640ad7817d1c888880ede97ea15364da9aff9570e2af28c906293c336b0083f6b4620f6367418746a
- SSDEEP 24576:ndJexCM6RmeWQMm8qblvx4DBG/y/0de++7dwA84ugrDOh0DbgvNzug9V:yxxVM8glJ4Du7de+wIh0DbIRR
- TLSH T155E51B027F049FFBC45CCE708DBDC706C16CAD86D6F195267768878DA9A93021B17AAC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself locker 805 mipsel.elf Changes the process name, possibly in an attempt to hide itself killer 806 mipsel.elf Changes the process name, possibly in an attempt to hide itself scan-telnet 817 mipsel.elf Changes the process name, possibly in an attempt to hide itself scan-banner 818 mipsel.elf -
description ioc Process File opened for reading /proc/112/cmdline mipsel.elf File opened for reading /proc/415/cmdline mipsel.elf File opened for reading /proc/661/fd mipsel.elf File opened for reading /proc/675/status mipsel.elf File opened for reading /proc/763/status mipsel.elf File opened for reading /proc/813/status mipsel.elf File opened for reading /proc/820/fd mipsel.elf File opened for reading /proc/3/cmdline mipsel.elf File opened for reading /proc/398/cmdline mipsel.elf File opened for reading /proc/724/cmdline mipsel.elf File opened for reading /proc/175/status mipsel.elf File opened for reading /proc/388/fd mipsel.elf File opened for reading /proc/uptime mipsel.elf File opened for reading /proc/823/status mipsel.elf File opened for reading /proc/826/cmdline mipsel.elf File opened for reading /proc/175/cmdline mipsel.elf File opened for reading /proc/377/fd mipsel.elf File opened for reading /proc/661/status mipsel.elf File opened for reading /proc/827/cmdline mipsel.elf File opened for reading /proc/831/cmdline mipsel.elf File opened for reading /proc/835/fd mipsel.elf File opened for reading /proc/836/fd mipsel.elf File opened for reading /proc/48/cmdline mipsel.elf File opened for reading /proc/392/status mipsel.elf File opened for reading /proc/808/cmdline mipsel.elf File opened for reading /proc/819/cmdline mipsel.elf File opened for reading /proc/838/fd mipsel.elf File opened for reading /proc/763/cmdline mipsel.elf File opened for reading /proc/352/status mipsel.elf File opened for reading /proc/820/status mipsel.elf File opened for reading /proc/834/cmdline mipsel.elf File opened for reading /proc/838/cmdline mipsel.elf File opened for reading /proc/47/cmdline mipsel.elf File opened for reading /proc/813/cmdline mipsel.elf File opened for reading /proc/823/fd mipsel.elf File opened for reading /proc/833/status mipsel.elf File opened for reading /proc/20/cmdline mipsel.elf File opened for reading /proc/777/cmdline mipsel.elf File opened for reading /proc/795/fd mipsel.elf File opened for reading /proc/810/cmdline mipsel.elf File opened for reading /proc/mounts mipsel.elf File opened for reading /proc/821/fd mipsel.elf File opened for reading /proc/829/fd mipsel.elf File opened for reading /proc/53/cmdline mipsel.elf File opened for reading /proc/377/cmdline mipsel.elf File opened for reading /proc/398/fd mipsel.elf File opened for reading /proc/760/status mipsel.elf File opened for reading /proc/813/fd mipsel.elf File opened for reading /proc/822/fd mipsel.elf File opened for reading /proc/29/cmdline mipsel.elf File opened for reading /proc/803/cmdline mipsel.elf File opened for reading /proc/334/status mipsel.elf File opened for reading /proc/820/cmdline mipsel.elf File opened for reading /proc/821/status mipsel.elf File opened for reading /proc/822/status mipsel.elf File opened for reading /proc/676/fd mipsel.elf File opened for reading /proc/25/cmdline mipsel.elf File opened for reading /proc/8/cmdline mipsel.elf File opened for reading /proc/415/status mipsel.elf File opened for reading /proc/675/fd mipsel.elf File opened for reading /proc/765/status mipsel.elf File opened for reading /proc/835/cmdline mipsel.elf File opened for reading /proc/19/cmdline mipsel.elf File opened for reading /proc/35/cmdline mipsel.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 800 mipsel.elf