Analysis
-
max time kernel
11591s -
max time network
151s -
platform
debian-9_mipsel -
resource
debian9-mipsel-20221111-en -
resource tags
arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem -
submitted
25-03-2023 21:55
Behavioral task
behavioral1
Sample
5b520d742218be4766fc0806b5e6879f.elf
Resource
debian9-mipsel-20221111-en
debian-9-mipsel
2 signatures
150 seconds
General
-
Target
5b520d742218be4766fc0806b5e6879f.elf
-
Size
110KB
-
MD5
5b520d742218be4766fc0806b5e6879f
-
SHA1
d2fe7010fcab6001f751bf0084a3119ab854301e
-
SHA256
088bc83f3ce2ff5ff7a50c37e06fa2f65e24e2d46b4fedf07d8e43092afe61bf
-
SHA512
fca44a05c7fdae080885ba1a97b1fcbfa06c332649987c5fc457a12b436ef378d644df5282374b897427ad9e1d16aaf2a888dc3410429525592932e1ff83e325
-
SSDEEP
1536:ZLeTikthhSMOCMQS+ZjN4pjuIxreg2ObN2eDo/TUmkiSFxfC7xbXe:ZhHC3S+dUreWNTDiTUmkiSFxfKxbXe
Score
7/10
Malware Config
Signatures
-
Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.
Processes:
5b520d742218be4766fc0806b5e6879f.elfdescription ioc process /proc/net/route /proc/net/route 5b520d742218be4766fc0806b5e6879f.elf -
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.
Processes:
5b520d742218be4766fc0806b5e6879f.elfdescription ioc process /proc/net/route /proc/net/route 5b520d742218be4766fc0806b5e6879f.elf