8407c9e9f47d99da514baf7d9f6f81dd46579089b550de0207e55ab1abcae752

Analysis

max time kernel
39929s
max time network
138s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
15-03-2023 20:46

Target

mips.s.elf
Size

123KB
MD5

098e52265b077d1400cb41ee311c7a0e
SHA1

77461d7d96d0d61fcfe63107da2e948dbd85c80c
SHA256

8407c9e9f47d99da514baf7d9f6f81dd46579089b550de0207e55ab1abcae752
SHA512

c88b9527c6556651f776f25e640a875a955385ad4a1f38b312f85ececdb253c73d949116df83a4309f8a8365b6a287f3adf44806a48ffea28f84dbc7098d92c1
SSDEEP

1536:M7je1TMGq+f+AQ2rK7zeXeReXe8V2rK7Ie+ud0GAzQj1l72HBeDEdWfRZrmW+IFj:Ted0J0MZQHLd6RZrmW+IFB1Dt1hR/

Score

7^/10

discovery

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

mips.s.elf

description ioc process

/proc/net/route /proc/net/route mips.s.elf
Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Scanning
T1046
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

mips.s.elf

description ioc process

/proc/net/route /proc/net/route mips.s.elf

description	ioc	process
/proc/net/route	/proc/net/route	mips.s.elf

description	ioc	process
/proc/net/route	/proc/net/route	mips.s.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Scanning

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact