6f61720f39465b4c4a6f970985a64bd3d9abadec54bddda46d273668f1a2abaa

Analysis

max time kernel
0s
max time network
124s
platform
debian-9_mips
resource
debian9-mipsbe-20221111-en
resource tags

arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
27-03-2023 01:59

Target

71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0.elf
Size

110KB
MD5

9d51cb16f8e3d4e07c520b3ccbcc1c02
SHA1

54a920600065be3c806a23b913081db2e5f26be4
SHA256

71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0
SHA512

43194852798e5eed37296f0bb01f7ad0995e89d42cee267adaeea792c810e3904731c1e5f5bcd9324aa423f28d2b6fd36827a6f80d4dc3258f2bec760be132a9
SSDEEP

3072:R/4tNF9U4vvpKw6J73x8UmkiSFxfKxbXe:BUNFK+p8T8UmkiSFxfKxbXe

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0.elf

description ioc process

/proc/net/route /proc/net/route 71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0.elf

description ioc process

/proc/net/route /proc/net/route 71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0.elf

description	ioc	process
/proc/net/route	/proc/net/route	71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0.elf

description	ioc	process
/proc/net/route	/proc/net/route	71d02b2e362c6e62c43909daf472c0cbd16b2a0f66e72bfb02031fd5850c5bd0.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact