Analysis
-
max time kernel
19269s -
max time network
153s -
platform
linux_mips -
resource
debian9-mipsbe-en-20211208 -
resource tags
-
submitted
19-07-2022 09:33
General
-
Target
50256e505d33395947903c46a2797e01435e13f03ebe8130f0701bcd2ed003a7
-
Size
91KB
-
MD5
82566f48328c844546fbdd7e03553faa
-
SHA1
f12f5a1a717a0f4e00252a9b04c4e62971b40065
-
SHA256
50256e505d33395947903c46a2797e01435e13f03ebe8130f0701bcd2ed003a7
-
SHA512
ca3e2bf297f31d2a5ddd90ef17bd61bb5ee52f409507e69d4a2fcf89e5ec0aa6edc02d1044f5453a41e9f926fda207a70b6c0e3706dcc663d7d2e883101cfce3
Score
9/10
Malware Config
Signatures
-
Contacts a large (36372) amount of remote hosts 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
-
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes
-
/tmp/50256e505d33395947903c46a2797e01435e13f03ebe8130f0701bcd2ed003a7/tmp/50256e505d33395947903c46a2797e01435e13f03ebe8130f0701bcd2ed003a71⤵
- Reads system routing table
- Reads system network configuration