Analysis
-
max time kernel
17215s -
max time network
153s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
submitted
25-06-2022 21:46
Static task
static1
Behavioral task
behavioral1
Sample
37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284
Resource
debian9-mipsel-en-20211208
0 signatures
0 seconds
General
-
Target
37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284
-
Size
125KB
-
MD5
6b0ce3599ec2b86c0a978aa66ef9b773
-
SHA1
0e2e8a5cacde36008068485be4add57a583461f8
-
SHA256
37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284
-
SHA512
d184242bd5a7ebac26bd356843d326aa03ecb4127b5c30f7d4331c3884d09acb8aa79b0fb637ca57f26d3a9653e254aa5dc1b1546159f53b51995a04ea0a3eee
Score
7/10
Malware Config
Signatures
-
Modifies rc script 1 TTPs 1 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
description ioc Process /etc/rc.d/rc.local /etc/rc.d/rc.local 37e8ac46bf6de9bbeb9b403f7883f7d74f7fcb4834e0d03864dfd0c085bff284 -
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
description ioc /proc/net/route /proc/net/route -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
description ioc /proc/net/route /proc/net/route