Analysis

  • max time kernel
    1785s
  • max time network
    150s
  • platform
    debian-9_mipsel
  • resource
    debian9-mipsel-20221111-en
  • resource tags

    arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    30-11-2022 12:38

General

  • Target

    4880f8dd2d88e4426caf5007afe822e430a80bc84ffefa839d35e313a33aa0a7

  • Size

    110KB

  • MD5

    fbc913ab0d4ccba6029fdfe166276f8e

  • SHA1

    93e15ff30f055b0aa5e0e8f3fb2aa27327e82724

  • SHA256

    4880f8dd2d88e4426caf5007afe822e430a80bc84ffefa839d35e313a33aa0a7

  • SHA512

    5203a502da0146a807e501c69d0094d366c27571b5c2c9bd22e672a25298f6eeb906d6f3b70dfb303bcf1e39621380234e33a4f849b1c292bd28ed81bb84ad59

  • SSDEEP

    1536:ZLeTGkthhSMOCMQS+ZjN4pjuIxreg2OOxt2eDo/LUmkiSFxfC7xbXe:Z5HC3S+dUre1tTDCLUmkiSFxfKxbXe

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/4880f8dd2d88e4426caf5007afe822e430a80bc84ffefa839d35e313a33aa0a7
    /tmp/4880f8dd2d88e4426caf5007afe822e430a80bc84ffefa839d35e313a33aa0a7
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:323

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Network Configuration Discovery

2
T1016

Replay Monitor

Loading Replay Monitor...

Downloads