67140c880ae63baa0d59b0a72298c870349fdbd78991458467bb037cb9a4d310

Analysis

max time kernel
36749s
max time network
151s
platform
linux_mipsel
resource
debian9-mipsel-en-20211208
resource tags

arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
07-02-2023 01:18

Target

25eceeb5a74cc4bea468272cb6210a64.elf
Size

136KB
MD5

25eceeb5a74cc4bea468272cb6210a64
SHA1

b205a19a95dc64c749438b3ee185a95de001f3e9
SHA256

67140c880ae63baa0d59b0a72298c870349fdbd78991458467bb037cb9a4d310
SHA512

1cef70652184bed6c258ccdc99574ac6f2a80b5c990f05c1cc4c1e14bf4d84896c378dd86801c0908c35556ccfcff758fcab5aa24aac85dd6f3cb153cf92e3db
SSDEEP

3072:oX0xGeoXc/JCv2FWsbMh6iVcEGmtBcEYj0u:ID9sbUjZGmtBcrj0u

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

25eceeb5a74cc4bea468272cb6210a64.elf

description ioc process

/proc/net/route /proc/net/route 25eceeb5a74cc4bea468272cb6210a64.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

25eceeb5a74cc4bea468272cb6210a64.elf

description ioc process

/proc/net/route /proc/net/route 25eceeb5a74cc4bea468272cb6210a64.elf

description	ioc	process
/proc/net/route	/proc/net/route	25eceeb5a74cc4bea468272cb6210a64.elf

description	ioc	process
/proc/net/route	/proc/net/route	25eceeb5a74cc4bea468272cb6210a64.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact