Analysis

  • max time kernel
    40240s
  • max time network
    150s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • resource tags

    arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
  • submitted
    19-03-2023 10:56

General

  • Target

    3eade75d8cf6b887c270398d53eb2421.elf

  • Size

    113KB

  • MD5

    3eade75d8cf6b887c270398d53eb2421

  • SHA1

    684d9b3a9f3c1106167757a112542c67faf3061d

  • SHA256

    0a7069d2151c31dad9403f26db704b8003678e96ec6b5a56a2fa8f67684aa8ad

  • SHA512

    1cfa4246dd41c6dc6ad6cd20b97bab413701b8070d9aa1497ded7aad6600336af96cd0b70fa6c360bb8dfbee80634f28cb7b822d54c02f178081897e3e2af1f4

  • SSDEEP

    3072:Cr5W3CDJrl5h5dVEgwxhKdwwjF9GhsR1Ae:KQStl5h5dVLkKdwwjF9GhsR1Ae

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/3eade75d8cf6b887c270398d53eb2421.elf
    /tmp/3eade75d8cf6b887c270398d53eb2421.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:320

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Network Configuration Discovery

2
T1016

Replay Monitor

Loading Replay Monitor...

Downloads