269b4c221f5e8c79ef442d9439db20d770e137df9117a22d6310aa462a8173b0

Analysis

max time kernel
2s
platform
debian-9_mips
resource
debian9-mipsbe-20260513-en
resource tags

arch:mipsimage:debian9-mipsbe-20260513-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
13/11/2026, 12:11

Target
debian/tests/01.compile-and-run-test-program.t
Size 264B
Sample261113-pc3f6sad76
SHA256 269b4c221f5e8c79ef442d9439db20d770e137df9117a22d6310aa462a8173b0
MD5 65515aef83b26ca6e13fc1cebab8f874
SHA1 9ea6a4e170ba8cb80dd92e042202c528d6b56f37
SHA512 886c1dcedeb91d0eec0e7d794276c12f1a6c51ca3c5c08dfe60dbbf5b2d7dfd7a763c5b975c2c3d73a288d994655747b9634e4bde22a47d6a603c5015e0aee83
TLSH
T105D02B39000F1E664C546A81CC09B43632D0C70539EC95008F531101D313F3F39CF701
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Reads runtime system information 4 IoCs

Reads data from /proc virtual filesystem.

Writes file to tmp directory 3 IoCs

Malware often drops required files in the /tmp directory.

description	ioc	Process
File opened for modification	/tmp/debian/tests/test-results/tmp/debian/tests/01.compile-and-run-test-program.720.counts	01.compile-and-run-test-program.t
File opened for modification	/tmp/ccrTHHNW.s	gcc
File opened for modification	/tmp/ccrTHHNW.s	cc1

/tmp/debian/tests/01.compile-and-run-test-program.t
/tmp/debian/tests/01.compile-and-run-test-program.t
1⤵
- Writes file to tmp directory
PID:720
- /usr/bin/tput
  tput bold
  2⤵
  PID:724
- /usr/bin/basename
  basename /tmp/debian/tests/01.compile-and-run-test-program.t .t
  2⤵
  PID:727
- /bin/rm
  rm -rf "trash directory.01.compile-and-run-test-program"
  2⤵
  PID:729
- /bin/mkdir
  mkdir -p "trash directory.01.compile-and-run-test-program"
  2⤵
  - Reads runtime system information
  PID:731
- /usr/bin/gcc
  gcc ../ex_stats_print.c -o ex_stats_print -ljemalloc
  2⤵
  - Writes file to tmp directory
  PID:733
- - /usr/lib/gcc/mips-linux-gnu/6/cc1
    /usr/lib/gcc/mips-linux-gnu/6/cc1 -quiet -imultiarch mips-linux-gnu ../ex_stats_print.c -meb -quiet -dumpbase ex_stats_print.c "-march=mips32r2" -mfpxx -mllsc -mno-lxc1-sxc1 -mips32r2 "-mabi=32" -auxbase ex_stats_print -o /tmp/ccrTHHNW.s
    3⤵
    - Writes file to tmp directory
    PID:740
- /bin/sed
  sed -e "s/^/# /"
  2⤵
  - Reads runtime system information
  PID:751
- /tmp/debian/tests/trash directory.01.compile-and-run-test-program/ex_stats_print
  ./ex_stats_print
  2⤵
  PID:753
- /bin/sed
  sed -e "s/^/# /"
  2⤵
  - Reads runtime system information
  PID:756
- /bin/mkdir
  mkdir -p /tmp/debian/tests/test-results
  2⤵
  - Reads runtime system information
  PID:757

ccrTHHNW.s

Path /tmp/ccrTHHNW.s
Size 122B
SHA256 1e1a622208e4d70ff40185f310efd679ca9e4cfe23c058a2fa123bbe46ade3e3
MD5 5ff34018e504376b556f79c87c59bbae
SHA1 3b30cda78a9b2aec610cae811a0232c2018611b0
SHA512 e438fd30f74dbf76b1cfefb6e22e1a1f040751c2c39856c81c6f69eb960d76cee8ba7cdb3ace44b07a2af9439a85061e47707a63089abd4445e9361712dcbbca
TLSH
T1E9B09B71123D4456A4055D39E49D11E098E873D1107C97844569CC5FE79641140C6027
MD5 SHA1 SHA512 TLSH

Submit Download