f5d43378d020c27bfeea69b3b163f2d341237dfe3b26f34864b0b1d54e518922

Analysis

max time kernel
0s
max time network
120s
platform
linux_mips
resource
debian9-mipsbe-en-20211208
resource tags

arch:mipsimage:debian9-mipsbe-en-20211208kernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
03-04-2023 19:39

Target

436f9295d0c0b800c3024eacc373a488.elf
Size

133KB
MD5

436f9295d0c0b800c3024eacc373a488
SHA1

7ed89d0b5eace657232595649118951ddd3895c2
SHA256

f5d43378d020c27bfeea69b3b163f2d341237dfe3b26f34864b0b1d54e518922
SHA512

9e95a1f82a8a4f165c85d5eee7bcb9bd4728848e290af6a469055c2cbd8bde86da8ccac9cad970fb0bc36dfcd71fa831ce0cd3ba561a9ac243f97c847e13ff87
SSDEEP

3072:/ZqFo8x61DDko8x61DDBKrQMAEsjj6zbM5vGaVCJ23K3MbHry6celYTgAfZHXPh6:QdtcI5prmW+IFB16t1hJ/

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

436f9295d0c0b800c3024eacc373a488.elf

description ioc process

/proc/net/route /proc/net/route 436f9295d0c0b800c3024eacc373a488.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

436f9295d0c0b800c3024eacc373a488.elf

description ioc process

/proc/net/route /proc/net/route 436f9295d0c0b800c3024eacc373a488.elf

description	ioc	process
/proc/net/route	/proc/net/route	436f9295d0c0b800c3024eacc373a488.elf

description	ioc	process
/proc/net/route	/proc/net/route	436f9295d0c0b800c3024eacc373a488.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact