Analysis

  • max time kernel
    30996s
  • max time network
    149s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    30-11-2022 13:45

General

  • Target

    116e11b321e005e00e8ad7814cebfa2779e3a0a730c3a2d0b5719d66c462de01

  • Size

    123KB

  • MD5

    3569ba2915c6eed009063ae8e8e4db08

  • SHA1

    6522c86b0e078d8abe2dd66eed6336798d992822

  • SHA256

    116e11b321e005e00e8ad7814cebfa2779e3a0a730c3a2d0b5719d66c462de01

  • SHA512

    6435c9981ee1d2fa5864f355282594ff84c9da64b9ecd341f779de36c530766906b307a3218174a48bcf180202c8929baf030fb6b4b35e65bb20edba43d3cadd

  • SSDEEP

    1536:g7je1TYGq+f+A02rKXzeve1eTe8p2rKXIeu+i0GAzQj1l72HBejERLWfRZrmW+IR:/a1U20MZQHbB6RZrmW+IFB1Dt1hR/

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/116e11b321e005e00e8ad7814cebfa2779e3a0a730c3a2d0b5719d66c462de01
    /tmp/116e11b321e005e00e8ad7814cebfa2779e3a0a730c3a2d0b5719d66c462de01
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:320

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Network Configuration Discovery

2
T1016

Replay Monitor

Loading Replay Monitor...

Downloads