Analysis
- max time kernel
1s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
arch:mipselimage:debian12-mipsel-20260513-enkernel:6.1.0-17-4kc-maltalocale:en-usos:debian-12-mipselsystem - submitted
27/10/2026, 15:50
Static task
static1
Behavioral task
behavioral1
Sample
iranbot-ultimate.mipsel.elf
Resource
debian12-mipsel-20260513-en
4 signatures
150 seconds
Errors
Reason
Reading agent response: unexpected EOF
General
- Target iranbot-ultimate.mipsel.elf
- Size 211KB
- Sample261027-s93d8aes7x
- SHA256 34968bc2f981c733c1b8b1f0f44736a28c2d90e66e7f40f36affcad3c002426b
- MD5 6dc814b9363f43623b379be8e3ac67bc
- SHA1 4da52823d6e1248c1f24448c19fe8691aacc8785
- SHA512 ed0ff47b950df37e9ce8f178821a0b94d4e37a1856985c670282eaf445198842ec05711144a1552381aabfaa46e21a31a84b557bbdace5e95bd76c7b3cc5c8f2
- SSDEEP 6144:N+YYmOmRR82a9HcOis3H2qTOdRwKmoXL7zmOXRS:NJhRL4HcNA4S
- TLSH T13A24F80A9F910FBBD8AFDE3702E90A0635CCA54722A43B753678D524F54E90F49E3C68
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Malware Config
Signatures
- Traces itself 1 IoCs
Traces itself to prevent debugging attempts
pid Process 806 iranbot-ultimate.mipsel.elf - Changes its process name 1 IoCs
description ioc pid Process Changes the process name, possibly in an attempt to hide itself t.me/flylegit 806 iranbot-ultimate.mipsel.elf -
description ioc Process File opened for reading /proc/self/status iranbot-ultimate.mipsel.elf - System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
pid Process 806 iranbot-ultimate.mipsel.elf