97167191be39276833a8e67a750b63e2cf9c72fe3f9dcfe5672ef1f32b755b99

Analysis

max time kernel
40726s
max time network
150s
platform
linux_mipsel
resource
debian9-mipsel-en-20211208
resource tags

arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
25-03-2023 02:05

Target

af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507.elf
Size

110KB
MD5

edf393c39fe8a2125dee426f77384a8e
SHA1

4d07589209fbe76d6715c65289c8f749237b6d19
SHA256

af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507
SHA512

bda089b9d2849c6f20092fb3b116375c18d416814ba5955dfd152b58beed1274d061096d0c45673b10756d5f4137b845e703503cb97ffaae06e455ac260c5bf6
SSDEEP

1536:ZLeTikthhSMOCMQS+ZjN4pjuIxreg2ONN2eDo/TUmkiSFxfC7xbXe:ZhHC3S+dUrecNTDiTUmkiSFxfKxbXe

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507.elf

description ioc process

/proc/net/route /proc/net/route af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507.elf

description ioc process

/proc/net/route /proc/net/route af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507.elf

description	ioc	process
/proc/net/route	/proc/net/route	af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507.elf

description	ioc	process
/proc/net/route	/proc/net/route	af21076246e2f0be9f2431a8e23122a9a998168ca08a5d9f5c6ce42d6b69e507.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact