Analysis
- max time kernel
124s - max time network
157s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
- submitted
01/10/2026, 12:18
General
- Target mipsle
- Size 5.2MB
- Sample261001-pgwjessfpg
- SHA256 27da1a86d39f52963382e29b35a2ff63041eae13f27c8efb2e917e426fcdab40
Score
6/10
Malware Config
Signatures
- Creates/modifies environment variables 1 TTPs 3 IoCs
Creating/modifying environment variables is a common persistence mechanism.
- Write file to user bin folder 2 IoCs
- Modifies Bash startup script 2 TTPs 3 IoCs
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/mipsle/tmp/mipsle1⤵
- Creates/modifies environment variables
- Write file to user bin folder
- Modifies Bash startup script
- Enumerates kernel/hardware configuration
- Reads runtime system information
- System Network Configuration Discovery
Network
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1Privilege Escalation
Boot or Logon Autostart Execution
1Event Triggered Execution
1Unix Shell Configuration Modification
1Hijack Execution Flow
1Path Interception by PATH Environment Variable
1