2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1

Analysis

max time kernel
30997s
max time network
149s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
30-11-2022 13:52

Target

2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1
Size

123KB
MD5

2c94e717547936fff609cb9869172388
SHA1

cd0acd82a4d1581232c190506af28aed7ec632fa
SHA256

2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1
SHA512

399ad8d14d26556b3f5c9338093406f72a4344a8da2e3d01c4747fca162205a7a28b1ed30840c534fb16e6426b881826f41c18b7f214aec18a20e0f27998446f
SSDEEP

1536:o7jx1TFaq+rgIyo2rKfRS/1vt5O7eASyLuy5hJdddddBRzCXdwmeFfkq+QCyRnV6:EbCavt5Ohay5hhRzCNwmeRkq+QXnVgj

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1

description ioc process

/proc/net/route /proc/net/route 2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1

description ioc process

/proc/net/route /proc/net/route 2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1

description	ioc	process
/proc/net/route	/proc/net/route	2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1

description	ioc	process
/proc/net/route	/proc/net/route	2c5496363122f23dc8470a48c068dd76ba2a99e1ae4cdf62ff24de5964ee1da1

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact