4ca20355bc8abfe8e69740b719ca573569c75191d049bf60e617fcbc628e4ed7

Analysis

max time kernel
0s
max time network
121s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
07-02-2023 01:19

Target

9bbe4e2b931c1832d388703c48318390.elf
Size

123KB
MD5

9bbe4e2b931c1832d388703c48318390
SHA1

8e2894354057ff1323d757d86293d0a1bafa22c5
SHA256

4ca20355bc8abfe8e69740b719ca573569c75191d049bf60e617fcbc628e4ed7
SHA512

0c870a2b0a0b9e10a07452f94a52b29ea7ce9c6030ce52eae3a18f04c678b8973ef7b5f601a95ce8439a69f7187cf4bf9a5e93214215b36d1b14b709b40f7dd8
SSDEEP

1536:U7jx1Tgaq+rgIyN2rKGZS/0zO5OHeyyL2N5hJdddddh6FhdwmeFfkq+QCyRnVgj:o627zO5OoyN5hB6FHwmeRkq+QXnVgj

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

9bbe4e2b931c1832d388703c48318390.elf

description ioc process

/proc/net/route /proc/net/route 9bbe4e2b931c1832d388703c48318390.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

9bbe4e2b931c1832d388703c48318390.elf

description ioc process

/proc/net/route /proc/net/route 9bbe4e2b931c1832d388703c48318390.elf

description	ioc	process
/proc/net/route	/proc/net/route	9bbe4e2b931c1832d388703c48318390.elf

description	ioc	process
/proc/net/route	/proc/net/route	9bbe4e2b931c1832d388703c48318390.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact