113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32

Analysis

max time kernel
30999s
max time network
152s
platform
linux_mipsel
resource
debian9-mipsel-en-20211208
resource tags

arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
30-11-2022 13:58

Target

113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32
Size

110KB
MD5

8cd6ddef7190f7cc88e6feafbfe9c2c9
SHA1

558333240b158862cd87358abacd02e07b928acc
SHA256

113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32
SHA512

71805861bd1915ec6e46af4fdc879fd26be47422d6652115f37aeb8e4b545ca9d6935df6857e61eac5039f8cfae3ed3e804878b6de7f2cae86c75325bfc1a3e0
SSDEEP

1536:ZLeTukthhSMOCMQS+ZjN4pjuIxreg2OItWklwUmkiSFxfC7xbXe:ZRHC3S+dUrextnwUmkiSFxfKxbXe

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32

description ioc process

/proc/net/route /proc/net/route 113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32

description ioc process

/proc/net/route /proc/net/route 113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32

description	ioc	process
/proc/net/route	/proc/net/route	113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32

description	ioc	process
/proc/net/route	/proc/net/route	113d59800f1db92fe9304e9e0bc737159cd2b0ff94bcd29d7fa0c91a235a1e32

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact