Analysis
-
max time kernel
0s -
max time network
151s -
platform
linux_mips -
resource
debian9-mipsbe-en-20211208 -
submitted
01-07-2022 14:19
General
-
Target
3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca6
-
Size
124KB
-
MD5
57acd79a0687f0a7655652599a2bfe93
-
SHA1
23416b88af0d716d93cb69daea62371b40c36df4
-
SHA256
3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca6
-
SHA512
f1bedf286d56efc20d68d309033da122eac1c9caa3d8de86efc7ede48620bca60106e7762d5c18c90a57b4b81e390b0a7a9574b0511d13dd2fe952e849aa610d
Score
7/10
Malware Config
Signatures
-
Modifies rc script 1 TTPs 1 IoCs
Adding/modifying system rc scripts is a common persistence mechanism.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
./3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca6./3dd598c51b6d2956a614a3b74cb021795377981e8dab2087ecd0bb2d3caedca61⤵
- Modifies rc script