Analysis
- max time kernel
150s - max time network
140s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
30/09/2026, 17:52
Static task
static1
Behavioral task
behavioral1
Sample
mips.elf
Resource
debian9-mipsbe-20260513-en
debian-9-mips
4 signatures
150 seconds
General
- Target mips.elf
- Size 3.1MB
- Sample260930-wftf1a11fs
- SHA256 3941e3f0037c1c5dffbbc2079456c8aadb10710271a64f7ef0395877c983e3a7
- MD5 3e363a6fa56a6f60784b9272086156be
- SHA1 114e83e717d5d01ad5135cdb929fd8ff51ef8232
- SHA512 7985728d5ff59111bc431edb358ba11bf399a95253ddf4bf5ce41b90a1053bd5c4a2c584430c6e10ea000e63b63b2ca582271cf8205c82105a3a41bfed8b3d3a
- SSDEEP 24576:bYE+lSund0ePSpZqZ45TvOfG+CHxnWOtO98MDxXHK+SMxSB6WVq3qJyumSCO/+Ht:bvsfGQ4MuFWBjxL8u
- TLSH T13FE52C16B920CFBEF08DE13014F3DA9511E168E309E5026EF358DB1D6EB0A4D992F9D9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Enumerates running processes
Discovers information about currently running processes on the system
- Changes its process name 4 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself locker 718 mips.elf Changes the process name, possibly in an attempt to hide itself killer 719 mips.elf Changes the process name, possibly in an attempt to hide itself scan-telnet 720 mips.elf Changes the process name, possibly in an attempt to hide itself scan-banner 721 mips.elf -
description ioc Process File opened for reading /proc/9/cmdline mips.elf File opened for reading /proc/801/cmdline mips.elf File opened for reading /proc/809/cmdline mips.elf File opened for reading /proc/16/cmdline mips.elf File opened for reading /proc/679/status mips.elf File opened for reading /proc/777/fd mips.elf File opened for reading /proc/782/fd mips.elf File opened for reading /proc/747/fd mips.elf File opened for reading /proc/794/fd mips.elf File opened for reading /proc/803/status mips.elf File opened for reading /proc/807/status mips.elf File opened for reading /proc/816/status mips.elf File opened for reading /proc/745/cmdline mips.elf File opened for reading /proc/755/fd mips.elf File opened for reading /proc/757/fd mips.elf File opened for reading /proc/793/cmdline mips.elf File opened for reading /proc/808/fd mips.elf File opened for reading /proc/812/cmdline mips.elf File opened for reading /proc/109/cmdline mips.elf File opened for reading /proc/389/cmdline mips.elf File opened for reading /proc/717/cmdline mips.elf File opened for reading /proc/744/fd mips.elf File opened for reading /proc/818/fd mips.elf File opened for reading /proc/11/cmdline mips.elf File opened for reading /proc/15/cmdline mips.elf File opened for reading /proc/705/cmdline mips.elf File opened for reading /proc/735/fd mips.elf File opened for reading /proc/768/cmdline mips.elf File opened for reading /proc/776/cmdline mips.elf File opened for reading /proc/818/status mips.elf File opened for reading /proc/157/status mips.elf File opened for reading /proc/728/cmdline mips.elf File opened for reading /proc/745/fd mips.elf File opened for reading /proc/748/fd mips.elf File opened for reading /proc/333/cmdline mips.elf File opened for reading /proc/745/status mips.elf File opened for reading /proc/753/fd mips.elf File opened for reading /proc/763/cmdline mips.elf File opened for reading /proc/789/status mips.elf File opened for reading /proc/806/status mips.elf File opened for reading /proc/811/status mips.elf File opened for reading /proc/380/cmdline mips.elf File opened for reading /proc/231/cmdline mips.elf File opened for reading /proc/762/fd mips.elf File opened for reading /proc/786/status mips.elf File opened for reading /proc/798/status mips.elf File opened for reading /proc/36/cmdline mips.elf File opened for reading /proc/176/cmdline mips.elf File opened for reading /proc/731/fd mips.elf File opened for reading /proc/767/fd mips.elf File opened for reading /proc/775/status mips.elf File opened for reading /proc/800/cmdline mips.elf File opened for reading /proc/22/cmdline mips.elf File opened for reading /proc/74/cmdline mips.elf File opened for reading /proc/764/status mips.elf File opened for reading /proc/778/fd mips.elf File opened for reading /proc/789/fd mips.elf File opened for reading /proc/813/cmdline mips.elf File opened for reading /proc/712/cmdline mips.elf File opened for reading /proc/738/cmdline mips.elf File opened for reading /proc/739/cmdline mips.elf File opened for reading /proc/760/status mips.elf File opened for reading /proc/809/fd mips.elf File opened for reading /proc/817/cmdline mips.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 715 mips.elf