6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14

Analysis

max time kernel
1784s
max time network
162s
platform
debian-9_mipsel
resource
debian9-mipsel-20221111-en
resource tags

arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
30-11-2022 12:50

Target

6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14
Size

123KB
MD5

828a03bde648e714a6086cd919820fcc
SHA1

1bb7065fca2f2fa794d440567fae53c2666211d0
SHA256

6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14
SHA512

bd93deab4bfec47ceea9df000ac0b93513692a7314ff06288b5dad6ad0829fe060f2cd3bed9a35677271e2f7e421cc9250cd2eebd3d6ae64ae0729d6442275af
SSDEEP

1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Ep/+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8E1+Dw8rmW+IFB1Dt1hR/

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14

description ioc process

/proc/net/route /proc/net/route 6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14

description ioc process

/proc/net/route /proc/net/route 6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14

description	ioc	process
/proc/net/route	/proc/net/route	6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14

description	ioc	process
/proc/net/route	/proc/net/route	6ca2a41867e49d7f9519a77212ed0e26b80c1480c9d18a21532e2e9728ed4d14

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact