0dd94e249280ce40b8a263b01adc78cfb108416a247dbdb364fd55186aba680a

Analysis

max time kernel
8339s
max time network
151s
platform
debian-9_mipsel
resource
debian9-mipsel-20221111-en
resource tags

arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
16-02-2023 06:34

Target

4aadfa1773cb481a8881c6ff0d9b42a9.elf
Size

170KB
MD5

4aadfa1773cb481a8881c6ff0d9b42a9
SHA1

7823271c6821f90be9db8918a7bf4c35c788fedd
SHA256

0dd94e249280ce40b8a263b01adc78cfb108416a247dbdb364fd55186aba680a
SHA512

b0cdf47fe96035ec2f0d7dc622b041a73fc253adb6d3e03ef05200ed5ad3c18492238f0a2a8e533f4a14379e02c89301a9f67abe43fe5b3866803992c4db52ff
SSDEEP

3072:fvH2pbvFjIEq6CbIHlsSrldQnq2Z4c2bO:fvH238ECNSrldQnq2Z4c2bO

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

4aadfa1773cb481a8881c6ff0d9b42a9.elf

description ioc process

/proc/net/route /proc/net/route 4aadfa1773cb481a8881c6ff0d9b42a9.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

4aadfa1773cb481a8881c6ff0d9b42a9.elf

description ioc process

/proc/net/route /proc/net/route 4aadfa1773cb481a8881c6ff0d9b42a9.elf

description	ioc	process
/proc/net/route	/proc/net/route	4aadfa1773cb481a8881c6ff0d9b42a9.elf

description	ioc	process
/proc/net/route	/proc/net/route	4aadfa1773cb481a8881c6ff0d9b42a9.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact