bc79ea94912c9ae5e738da9008f88f7d6417699f9f7349139de2f013eab221a9

Analysis

max time kernel
40023s
max time network
152s
platform
linux_mipsel
resource
debian9-mipsel-en-20211208
resource tags

arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
16-03-2023 22:37

Target

c213b26628fd517181665fc7bb4e196b.elf
Size

123KB
MD5

c213b26628fd517181665fc7bb4e196b
SHA1

d6f634e705380cbd682811f9109d7065b26530e4
SHA256

bc79ea94912c9ae5e738da9008f88f7d6417699f9f7349139de2f013eab221a9
SHA512

8ef94994d9b70c125ce1c92c81abe2d21edbdb0e9f20df45a74c5f9c4a46800ee61cabb32cac00ae0b9244926114ab4b1f2de952fa00b26bc2831748657adc0f
SSDEEP

1536:/UHeTxCAms/Y8Zm3lKYA43gMJwSkJ8Epd+DzUh8rmW+IFB1Df11hR/:/UyLqAmgMJM8E/+Dw8rmW+IFB1Dt1hR/

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

c213b26628fd517181665fc7bb4e196b.elf

description ioc process

/proc/net/route /proc/net/route c213b26628fd517181665fc7bb4e196b.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

c213b26628fd517181665fc7bb4e196b.elf

description ioc process

/proc/net/route /proc/net/route c213b26628fd517181665fc7bb4e196b.elf

description	ioc	process
/proc/net/route	/proc/net/route	c213b26628fd517181665fc7bb4e196b.elf

description	ioc	process
/proc/net/route	/proc/net/route	c213b26628fd517181665fc7bb4e196b.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact