Analysis

  • max time kernel
    0s
  • max time network
    120s
  • platform
    linux_mipsel
  • resource
    debian9-mipsel-en-20211208
  • resource tags

    arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
  • submitted
    27-03-2023 01:33

General

  • Target

    088bc83f3ce2ff5ff7a50c37e06fa2f65e24e2d46b4fedf07d8e43092afe61bf.elf

  • Size

    110KB

  • MD5

    5b520d742218be4766fc0806b5e6879f

  • SHA1

    d2fe7010fcab6001f751bf0084a3119ab854301e

  • SHA256

    088bc83f3ce2ff5ff7a50c37e06fa2f65e24e2d46b4fedf07d8e43092afe61bf

  • SHA512

    fca44a05c7fdae080885ba1a97b1fcbfa06c332649987c5fc457a12b436ef378d644df5282374b897427ad9e1d16aaf2a888dc3410429525592932e1ff83e325

  • SSDEEP

    1536:ZLeTikthhSMOCMQS+ZjN4pjuIxreg2ObN2eDo/TUmkiSFxfC7xbXe:ZhHC3S+dUreWNTDiTUmkiSFxfKxbXe

Score
7/10

Malware Config

Signatures

  • Reads system routing table 1 TTPs 1 IoCs

    Gets active network interfaces from /proc virtual filesystem.

  • Reads system network configuration 1 TTPs 1 IoCs

    Uses contents of /proc filesystem to enumerate network settings.

Processes

  • /tmp/088bc83f3ce2ff5ff7a50c37e06fa2f65e24e2d46b4fedf07d8e43092afe61bf.elf
    /tmp/088bc83f3ce2ff5ff7a50c37e06fa2f65e24e2d46b4fedf07d8e43092afe61bf.elf
    1⤵
    • Reads system routing table
    • Reads system network configuration
    PID:327

Network

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Network Configuration Discovery

2
T1016

Replay Monitor

Loading Replay Monitor...

Downloads