50db148dae09a23fc4663b21304479c9018eaf79d4779ec4c5c8c0770fbc32a7

Analysis

max time kernel
0s
max time network
124s
platform
debian-9_mipsel
resource
debian9-mipsel-20221111-en
resource tags

arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
18-03-2023 09:18

Target

16ba6eb8005938ef4a850c46b9704bde.elf
Size

110KB
MD5

16ba6eb8005938ef4a850c46b9704bde
SHA1

0846bc862583eac55280864b6ba6d8fa6e41bb66
SHA256

50db148dae09a23fc4663b21304479c9018eaf79d4779ec4c5c8c0770fbc32a7
SHA512

88971a9843e44654501efd0a5746b914b05899928985869d2e0b312a322b0acc75b18193c31fd647fea3deedd943d2c903d6313761c4049aa3cc9bc46d88fcd8
SSDEEP

1536:ZLeTikthhSMOCMQS+ZjN4pjuIxreg2OVN2eDo/TUmkiSFxfC7xbXe:ZhHC3S+dUreoNTDiTUmkiSFxfKxbXe

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

16ba6eb8005938ef4a850c46b9704bde.elf

description ioc process

/proc/net/route /proc/net/route 16ba6eb8005938ef4a850c46b9704bde.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

16ba6eb8005938ef4a850c46b9704bde.elf

description ioc process

/proc/net/route /proc/net/route 16ba6eb8005938ef4a850c46b9704bde.elf

description	ioc	process
/proc/net/route	/proc/net/route	16ba6eb8005938ef4a850c46b9704bde.elf

description	ioc	process
/proc/net/route	/proc/net/route	16ba6eb8005938ef4a850c46b9704bde.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact