Analysis

  • max time kernel
    0s
  • max time network
    116s
  • platform
    linux_mips
  • resource
    debian9-mipsbe
  • submitted
    14-10-2021 04:50

General

  • Target

    zte

  • Size

    32KB

  • MD5

    d28b5bdf03da10e2c27846a40b73c874

  • SHA1

    f9b9b03e5a733f718f7316135bb7489c73fef2d5

  • SHA256

    88306879ac14b82e924808caeec6851caa9bde40964e26c24dec00850fc260bd

  • SHA512

    04f35a03a620bb34f38e26ce21b74e71bcafdff1f13b8cd394c0306f1f86ea8662e319ffba6f4464a9c161114806251b4305083db1316caa17946f18109c5aa4

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

  • Reads runtime system information 1 IoCs

    Reads data from /proc virtual filesystem.

Processes

  • ./zte
    ./zte
    1⤵
    • Reads system routing table
    • Reads system network configuration
    • Reads runtime system information
    PID:327

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Network Configuration Discovery

2
T1016

Replay Monitor

Loading Replay Monitor...

Downloads