Analysis
- max time kernel
144s - max time network
147s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem - submitted
04/10/2026, 04:35
Static task
static1
Behavioral task
behavioral1
Sample
kswapd0.elf
Resource
debian9-mipsbe-20260513-en
1 signatures
150 seconds
General
- Target kswapd0.elf
- Size 6.6MB
- Sample261004-e7xjast15p
- SHA256 c8ef73f41b3a1e5c876c03e0447ac52ba39e5457b37fa2098398a1d80b5526e4
- MD5 b316164f5e0c232ad8129d5d4f09b011
- SHA1 2becf3474ca574514d24676529fc1013732e49ce
- SHA512 3dddac6a99f4dfe9b25fe02a2c6d5ef1f937a7cadb5476bea935eec7902bb61ee8676c5970891cfca5ed54b40fa3c2f765c8faa9da6ff6d879ebacaef01433d9
- SSDEEP 49152:UUOxB6syu1Upy0fxJW7CqKZzASyW7MJ9svX3NW1yW3w5DthrAnHHEt5E3:t54KpMk2eDt1AnnEjE3
- TLSH T1896608237B1CE70FC62922341CB2DA98272A1C5A41D6951BB385F31DE9F21AC5D6ECF1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
description ioc Process File opened for reading /sys/kernel/mm/transparent_hugepage/hpage_pmd_size kswapd0.elf
Processes
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /tmp/.ICE-unix/.ICEauth
- Size 4B
- SHA256 37d52d1fd41daaf41bf3b22cf28348e99ba1b8569a872d7364e89b8e70cf01d5
- MD5 958b6cb145e8bdca569dd5493f7b41a9
- SHA1 818266a8aafb6196d1872d84e3bafb9825507f0d
- SHA512 17ab5ca684e07113fb39be8f96739f14d21c4b347780840c8dca05c4e940cacc1afb966e3bed11def9db998e54a0ccaa62c96b8ac07615094fcc685005cba461
- MD5 SHA1 SHA512
- Path /tmp/.font-unix/.font0-lock
- Size 3B
- SHA256 35c71bd7eaf4607047bb7c186d17251942204229b897e033923b13dc8ce2d109
- MD5 8df707a948fac1b4a0f97aa554886ec8
- SHA1 32e9d389ede4a021467f51eea81dc2bde15a33ad
- SHA512 2b3cd8464834d78b069de65ccfff70731eb3db7868bed2d3077e45e579b296344491b21a5af98a4f8ee3337db5c1fea006e81b29644f28fe27dad7731419c8a9
- MD5 SHA1 SHA512