55bd01ad5cdba1b46328e46216a9a34a5cd131b8c60a4e9bc649c4936bdd6b24

Analysis

max time kernel
0s
max time network
124s
platform
debian-9_mips
resource
debian9-mipsbe-20221111-en
resource tags

arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
09-02-2023 00:28

Target

227f7610db78670e9c8018cefc82658e.elf
Size

123KB
MD5

227f7610db78670e9c8018cefc82658e
SHA1

23dafadf0edf9fb5e05692346a27acf4dec02d12
SHA256

55bd01ad5cdba1b46328e46216a9a34a5cd131b8c60a4e9bc649c4936bdd6b24
SHA512

db3b2e4e2661518c85a35a81b022df016e4a6f0073c3ea90c2d12bb0dc279b4da81e314db565d5c1e2e06b71641412f66f584c8b639976976c9c549c96b47f76
SSDEEP

1536:HbDwVYuaKurNAV2rKQ7j+4GeGISeG+GX8J2rKQnGx7M/wa5zIXp3xJJoPxepPb3v:QRGUwaMNoPmPb3JrmthjF71Dq1MdI

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

227f7610db78670e9c8018cefc82658e.elf

description ioc process

/proc/net/route /proc/net/route 227f7610db78670e9c8018cefc82658e.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

227f7610db78670e9c8018cefc82658e.elf

description ioc process

/proc/net/route /proc/net/route 227f7610db78670e9c8018cefc82658e.elf

description	ioc	process
/proc/net/route	/proc/net/route	227f7610db78670e9c8018cefc82658e.elf

description	ioc	process
/proc/net/route	/proc/net/route	227f7610db78670e9c8018cefc82658e.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact