Analysis
- max time kernel
149s - max time network
151s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
30/09/2026, 01:11
Static task
static1
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20260513-en
3 signatures
150 seconds
General
- Target mips.elf
- Size 194KB
- Sample260930-bj4e6azzdw
- SHA256 75c73edb8acbfb89c116399a3de90ed2331ecb7deb326d5daf543470471bc4e1
- MD5 99add172715890e83666f9f5408c1eaa
- SHA1 1c2f97209b27009a4724576ff62c5dfa815a9290
- SHA512 10f44fd20048e446851cb551af1fd35b130459cabc40bb799404f3e74b22da09bceb42785c71e680e8fd7463ef27998c45591b159dac6e5608939759f32bab58
- SSDEEP 3072:QqYFmyq0Hn8KaKRN9D3FY/Uo6t5ZTimvBBIWWS:QqYgyq0HOKdid6tjiABqWWS
- TLSH T10214A71E6E228F7EF678873047B79A35A76923D623E0D645E1ACC1105F2035E641FFA8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Unexpected DNS network traffic destination 6 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 94.16.114.254 Destination IP 94.16.114.254 Destination IP 94.16.114.254 Destination IP 94.16.114.254 Destination IP 94.16.114.254 Destination IP 195.10.195.195 - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself /bin/bash 710 mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 710 mips.elf