Analysis

  • max time kernel
    144s
  • max time network
    147s
  • platform
    debian-9_mips
  • resource
    debian9-mipsbe-20260513-en
  • resource tags

    arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    04/10/2026, 04:35

General

  • Target
    kswapd0.elf
  • Size 6.6MB
  • Sample261004-e7xjast15p
  • SHA256 c8ef73f41b3a1e5c876c03e0447ac52ba39e5457b37fa2098398a1d80b5526e4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Enumerates kernel/hardware configuration 1 TTPs 1 IoCs

    Reads contents of /sys virtual filesystem to enumerate system information.

Processes

  • /tmp/kswapd0.elf
    /tmp/kswapd0.elf
    1⤵
    • Enumerates kernel/hardware configuration
    PID:715

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        .ICEauth

        • Path /tmp/.ICE-unix/.ICEauth
        • Size 4B
        • SHA256 37d52d1fd41daaf41bf3b22cf28348e99ba1b8569a872d7364e89b8e70cf01d5
        • MD5 SHA1 SHA512

        .font0-lock

        • Path /tmp/.font-unix/.font0-lock
        • Size 3B
        • SHA256 35c71bd7eaf4607047bb7c186d17251942204229b897e033923b13dc8ce2d109
        • MD5 SHA1 SHA512