Overview

overview

10

Static

static

10

earyzq

linux_mips

7

Analysis

  • max time kernel
    0s
  • max time network
    179s
  • platform
    linux_mips
  • resource
    debian9-mipsbe
  • submitted
    28-09-2021 08:01

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    earyzq

  • Size

    123KB

  • MD5

    7fecf5809e5ab66224e0f08c40a8777a

  • SHA1

    f78296acac2c310e035d04907bbdfabd75c40454

  • SHA256

    41af33fe2b340a117e8e87a6763817049e004fb58820f0242388b8e75470dd2e

  • SHA512

    0d11f034ac498b6a4f31f2522f9a61a61b2de0aa49f427fd2740283fe7fb56ded3f428306c707712f1a59ef7653b7924930dabe43cd725e167ebd64185606b98

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • ./earyzq
    ./earyzq
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:339

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

2
T1016

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads