d570a1702448fac805fe39e9a49fd1ca24e4505161eec68cf6e7f5e2b6a34ce0

Analysis

max time kernel
152s
max time network
164s
platform
debian-12_mipsel
resource
debian12-mipsel-20260513-en
resource tags

arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem
submitted
17/10/2026, 06:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
mipsle
Size 38.0MB
Sample261017-hbxe7syscx
SHA256 d570a1702448fac805fe39e9a49fd1ca24e4505161eec68cf6e7f5e2b6a34ce0
MD5 49d89fc88c986465074916dd18411074
SHA1 cda7e856dad15d6959de895717eb27a94176d176
SHA512 5f3aef036b483e5176fee39bb5f5421394829b82b8341e893caa3c1928ee23fd538f1fc5ff8d0d9b78a4bb3fbd032a4bdd37d88bea125d1922db954f18575d69
SSDEEP 98304:D0tTePaKRew12kac1bpLk5b1Dq6BzUX3YarVbrzvAnoG7PHjQFX6dBl5TJ1VhRgZ:AtTe9RepknLk5BGhqoiPHj40n8e8/3FN
TLSH
T1B197B3059CC42ABBC46C0EB060DF897A7A209D189FE20B6B5465F9D9B8753317F5BC8C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

discovery

Malware Config

Signatures

Enumerates kernel/hardware configuration 1 TTPs 4 IoCs

Reads contents of /sys virtual filesystem to enumerate system information.

discovery

System Information Discovery

T1082

description	ioc	Process
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	mipsle
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	mipsle
File opened for reading	/sys/kernel/mm/transparent_hugepage/hpage_pmd_size	mipsle
File opened for reading	/sys/fs/cgroup/system.slice/agent.service/cpu.max	mipsle

Reads runtime system information 4 IoCs

Reads data from /proc virtual filesystem.

discovery

description	ioc	Process
File opened for reading	/proc/self/cgroup	mipsle
File opened for reading	/proc/self/mountinfo	mipsle
File opened for reading	/proc/self/cgroup	mipsle
File opened for reading	/proc/self/mountinfo	mipsle

System Network Configuration Discovery 1 TTPs 2 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
814	mipsle
865	mipsle

/tmp/mipsle
/tmp/mipsle
1⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
- System Network Configuration Discovery
PID:814
- /tmp/mipsle
  /tmp/mipsle
  2⤵
  - Enumerates kernel/hardware configuration
  - Reads runtime system information
  - System Network Configuration Discovery
  PID:865

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads