40a74939860fd9be6c654cb52bd661dfafb9cbb2a90e886506efec6e7e9a341d

Analysis

max time kernel
0s
max time network
125s
platform
debian-9_mips
resource
debian9-mipsbe-20221111-en
resource tags

arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
16-02-2023 05:03

Target

1fd1d3179487ad971f7fd58e0a426ebd.elf
Size

131KB
MD5

1fd1d3179487ad971f7fd58e0a426ebd
SHA1

172e023aa2e2ec7378f39a08fda53d77a94a4c0c
SHA256

40a74939860fd9be6c654cb52bd661dfafb9cbb2a90e886506efec6e7e9a341d
SHA512

e1ad32d72d0162dd20e86e6c69edde2aa8dbf9d074da996fca081fe61b3ccf0295bff575d1b7f0f36ee499f0ac77252cc45b5244eb11377c24cb476f47895f91
SSDEEP

3072:jGTyrDxJWwAfr9f3yJddxUEJmTDmjOrWcpu3NJFARtRVJhGvaZqhZYiDhB/ZZ9BL:C+nZSZ/nJeUmkASFxBKvXZX

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

1fd1d3179487ad971f7fd58e0a426ebd.elf

description ioc process

/proc/net/route /proc/net/route 1fd1d3179487ad971f7fd58e0a426ebd.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

1fd1d3179487ad971f7fd58e0a426ebd.elf

description ioc process

/proc/net/route /proc/net/route 1fd1d3179487ad971f7fd58e0a426ebd.elf

description	ioc	process
/proc/net/route	/proc/net/route	1fd1d3179487ad971f7fd58e0a426ebd.elf

description	ioc	process
/proc/net/route	/proc/net/route	1fd1d3179487ad971f7fd58e0a426ebd.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact