Analysis
-
max time kernel
17224s -
max time network
152s -
platform
linux_mipsel -
resource
debian9-mipsel-en-20211208 -
submitted
25-06-2022 23:43
General
-
Target
37509bf4e189b6b38ed257deac85bf33f5741ea283b7bffd248697a60cf29a7f
-
Size
126KB
-
MD5
99fe187f1b3fc5b3396e9e9ac743c2be
-
SHA1
97fac9876d2ce75c6f6535ebc6ece70f1132de47
-
SHA256
37509bf4e189b6b38ed257deac85bf33f5741ea283b7bffd248697a60cf29a7f
-
SHA512
b0bf650de7f2009a85247673daf428af40e5f1815a7e502fc8a2648200c5fd4bf102cc6df3040f8505cede066593f529a3e4550c8ee09ed03d77b42642f38da9
Score
7/10
Malware Config
Signatures
-
Modifies rc script 1 TTPs 1 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
./37509bf4e189b6b38ed257deac85bf33f5741ea283b7bffd248697a60cf29a7f./37509bf4e189b6b38ed257deac85bf33f5741ea283b7bffd248697a60cf29a7f1⤵
- Modifies rc script