6703cb59a983f11aeb73d0f9fd0f8002e0cbe8ee074fb741aeeb5a760871baed

Analysis

max time kernel
0s
max time network
151s
platform
debian-9_mipsel
resource
debian9-mipsel-20221111-en
resource tags

arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
26-02-2023 10:51

Target

m-p.s-l.Sakura.elf
Size

123KB
MD5

20cecddba18535a9a4728f58ecee5c62
SHA1

f0a80396dbed49fb0c96a612f0b96e201763fcea
SHA256

6703cb59a983f11aeb73d0f9fd0f8002e0cbe8ee074fb741aeeb5a760871baed
SHA512

5c71f1fe081432b552c8b5c3a479a470c133090bab631bd85875fc0a634656e8e6f186de42466016255e4b5162a7f2ad7e6c233e2411b8ea619de1dd60c4a7c5
SSDEEP

1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8EpD+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8EF+Dw8rmW+IFB1Dt1hR/

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

m-p.s-l.Sakura.elf

description ioc process

/proc/net/route /proc/net/route m-p.s-l.Sakura.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

m-p.s-l.Sakura.elf

description ioc process

/proc/net/route /proc/net/route m-p.s-l.Sakura.elf

description	ioc	process
/proc/net/route	/proc/net/route	m-p.s-l.Sakura.elf

description	ioc	process
/proc/net/route	/proc/net/route	m-p.s-l.Sakura.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact