goddosagent | 7b02ceb41d8c2fec1a892d6d49cfe76b9a789e7afb6711bd19b4d5e2fd201c3d

Analysis

max time kernel
128s
max time network
129s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
03/10/2026, 18:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mips
Size 5.6MB
Sample261003-wxpjdathrb
SHA256 7b02ceb41d8c2fec1a892d6d49cfe76b9a789e7afb6711bd19b4d5e2fd201c3d
MD5 de1479576f436b31fe844740e3aff151
SHA1 6852ea82893514fe596673b5c243c1f807d5b566
SHA512 013414ffa1eadc6759fbfedc555d10d9d187edc9db5a1c3fb0242e32a9fc0905663a0f7f2f1b3e2ea935ad8c218d72a48313a08639a71a4a5711f3cec74d5a01
SSDEEP 49152:a9nEoerQAmpMqxjn7zrM2F5m5ds5eORLbaE3Ge49ZIFWLSB8oOrG26bT8w9zcbRw:a9dvBF3PAn30nJ
TLSH
T1205618237A28DB0FC228123419B1CED56B291C9645D69917B342F31DF9F20BC996EEF1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

botnet discovery goddosagent

Malware Config

Signatures

Family: GoDDoSAgent
GoDDoSAgent is a Linux botnet written in GoLang.
botnet goddosagent

Detects GoDDoSAgent 1 IoCs

resource	yara_rule
behavioral1/files/fstream-2.dat	family_goddosagent

Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	mips

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
712	mips

/tmp/mips
/tmp/mips
1⤵
- Enumerates kernel/hardware configuration
- System Network Configuration Discovery
PID:712

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

sysd

Path /usr/bin/sysd
Size 5.6MB
SHA256 7b02ceb41d8c2fec1a892d6d49cfe76b9a789e7afb6711bd19b4d5e2fd201c3d
MD5 de1479576f436b31fe844740e3aff151
SHA1 6852ea82893514fe596673b5c243c1f807d5b566
SHA512 013414ffa1eadc6759fbfedc555d10d9d187edc9db5a1c3fb0242e32a9fc0905663a0f7f2f1b3e2ea935ad8c218d72a48313a08639a71a4a5711f3cec74d5a01
SSDEEP 49152:a9nEoerQAmpMqxjn7zrM2F5m5ds5eORLbaE3Ge49ZIFWLSB8oOrG26bT8w9zcbRw:a9dvBF3PAn30nJ
TLSH
T1205618237A28DB0FC228123419B1CED56B291C9645D69917B342F31DF9F20BC996EEF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download