9fcb5fd5b3373bf0de911417fdd8026db50899acae2a2712c918ed04caaa531f

Analysis

max time kernel
149s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
27/10/2026, 15:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
bot.mips.elf
Size 309KB
Sample261027-s2mnsses2w
SHA256 9fcb5fd5b3373bf0de911417fdd8026db50899acae2a2712c918ed04caaa531f
MD5 f63b52f31f554bcc5a179a35fd750963
SHA1 8e0286743a23331d36f785da277f8d8da81f5c3c
SHA512 051a4926e5db69955c12d21ea5699585cbdc20077dff784d1febc81e8ea0793bffb68d567f4cfb46766d6537afc2502aab93c2a622c81b9f2ac31ae030ff89e1
SSDEEP 6144:a7UVqvvLoaD0BKJrG5UbuzmY63QBG60M6+K:aUVqvvUtBXQY63cG/+K
TLSH
T1E1644B137B218FA2F25581B109F7C5996ED912C32BF188A5A36DC75C3F22265385FEE0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

4^/10

discovery

Malware Config

Signatures

Changes its process name 1 IoCs

description	ioc	pid	Process
Changes the process name, possibly in an attempt to hide itself	dhcpcd	726	bot.mips.elf

System Network Configuration Discovery 1 TTPs 1 IoCs

Adversaries may gather information about the network configuration of a system.

discovery

System Network Configuration Discovery

T1016

pid	Process
725	bot.mips.elf

/tmp/bot.mips.elf
/tmp/bot.mips.elf
1⤵
- Changes its process name
- System Network Configuration Discovery
PID:725

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads