Analysis
- max time kernel
1s - max time network
0s - platform
debian-12_mipsel - resource
debian12-mipsel-20260513-en - resource tags
- submitted
31/10/2026, 14:36
Errors
Reason
Reading agent response: unexpected EOF
General
- Target iranbot-ultimate.mipsel.elf
- Size 215KB
- Sample261031-ryw8dsxxbx
- SHA256 0b48c4623e235493a4c9d504e85db52f2e2d52bcb57dbda69bc9d235619aa0ed
Score
7/10
Malware Config
Signatures
- Traces itself 1 IoCs
Traces itself to prevent debugging attempts
- Reads process memory 1 TTPs 16 IoCs
Read the memory of a process through the /proc virtual filesystem. This can be used to steal credentials.
- Changes its process name 1 IoCs
- Reads runtime system information 2 IoCs
Reads data from /proc virtual filesystem.
- System Network Configuration Discovery 1 TTPs 1 IoCs
Adversaries may gather information about the network configuration of a system.
Processes
-
/tmp/iranbot-ultimate.mipsel.elf/tmp/iranbot-ultimate.mipsel.elf1⤵
- Traces itself
- Reads process memory
- Changes its process name
- Reads runtime system information
- System Network Configuration Discovery