9f5941cf2074b828a173e5f00697e2390b9f6580382e2b1c7416ec0d38b2f9a7

Analysis

max time kernel
41157s
max time network
152s
platform
linux_mipsel
resource
debian9-mipsel-en-20211208
resource tags

arch:mipselimage:debian9-mipsel-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
30-03-2023 01:45

Target

a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548.elf
Size

110KB
MD5

a6dcb2cf18cc0dec659fa786d792abbe
SHA1

809e460f682c87ed1d7b218a6ab0eaee32a7938c
SHA256

a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548
SHA512

e6415901a0f46d09decec34097ad5ca23e62756a3b405fc3d0d0576e3a24c73cc7b766a48e9f744f03c6d5f64013f3870709a94d28916d80382027221c654626
SSDEEP

1536:aOHeTmJgQiRYSIlZHWyhXqyxUIeXyJwOJdCcR5Cugm1+XFBk/1P2wv:p0cMtGwUUEhgm1+XFBktP2wv

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548.elf

description ioc process

/proc/net/route /proc/net/route a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548.elf

description ioc process

/proc/net/route /proc/net/route a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548.elf

description	ioc	process
/proc/net/route	/proc/net/route	a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548.elf

description	ioc	process
/proc/net/route	/proc/net/route	a219e19c2bf4462021c94f512ee59f099287c3bdb8270d55645e9d62c4e76548.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact