edb1f8469d9596c3fd6ff7ac20ecc0e2d1d4831bfd20288a7be0a1ffe63bada3

Analysis

max time kernel
0s
max time network
124s
platform
debian-9_mips
resource
debian9-mipsbe-20221111-en
resource tags

arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
18-03-2023 18:15

Target

5139114248cea9b2e0bc79fbb2dcbd24.elf
Size

110KB
MD5

5139114248cea9b2e0bc79fbb2dcbd24
SHA1

375b2ace82a7f6e8d45df1287378ff2db6b9acba
SHA256

edb1f8469d9596c3fd6ff7ac20ecc0e2d1d4831bfd20288a7be0a1ffe63bada3
SHA512

4ea1087d2fcfb9130ab6370dc3dc039b9b7b8080e723f63ced71501fce3ef4f472ac3fa3d041d6bc053daf86c07f0a6ac2b9bddc6fa002fd1e2e8b7868b1fec5
SSDEEP

3072:R/4tNF9U4vvlKw6J73x8UmkiSFxfKxbXe:BUNFK+l8T8UmkiSFxfKxbXe

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

5139114248cea9b2e0bc79fbb2dcbd24.elf

description ioc process

/proc/net/route /proc/net/route 5139114248cea9b2e0bc79fbb2dcbd24.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

5139114248cea9b2e0bc79fbb2dcbd24.elf

description ioc process

/proc/net/route /proc/net/route 5139114248cea9b2e0bc79fbb2dcbd24.elf

description	ioc	process
/proc/net/route	/proc/net/route	5139114248cea9b2e0bc79fbb2dcbd24.elf

description	ioc	process
/proc/net/route	/proc/net/route	5139114248cea9b2e0bc79fbb2dcbd24.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact