0c6f5b1412fbb4c9143df6ab8f990aa284052d049b8dc2895b6db0dd923e8f33

Analysis

max time kernel
12361s
max time network
150s
platform
debian-9_mipsel
resource
debian9-mipsel-20221111-en
resource tags

arch:mipselimage:debian9-mipsel-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipselsystem
submitted
03-04-2023 19:50

Target

bfbd01c4cf59a84d9ba40a02b9aa27f6.elf
Size

133KB
MD5

bfbd01c4cf59a84d9ba40a02b9aa27f6
SHA1

e26d234c4120a23e85f02a0bedf2297ce44bab76
SHA256

0c6f5b1412fbb4c9143df6ab8f990aa284052d049b8dc2895b6db0dd923e8f33
SHA512

b4dcdd8333d701b579e45690c5d06abed7f4b457b5b8433d1af3107355083a2947d1dd2620ba47189c34b879010b241589333d953ca2045bbd74637800f5417e
SSDEEP

1536:Nc3eTkeVfACLsYXZF6beI/o8OVcjpRqdAXH4VDHcIrmW+IFB16f11hJ/:NcjIEZOVCqmXUDHcIrmW+IFB16t1hJ/

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

bfbd01c4cf59a84d9ba40a02b9aa27f6.elf

description ioc process

/proc/net/route /proc/net/route bfbd01c4cf59a84d9ba40a02b9aa27f6.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

bfbd01c4cf59a84d9ba40a02b9aa27f6.elf

description ioc process

/proc/net/route /proc/net/route bfbd01c4cf59a84d9ba40a02b9aa27f6.elf

description	ioc	process
/proc/net/route	/proc/net/route	bfbd01c4cf59a84d9ba40a02b9aa27f6.elf

description	ioc	process
/proc/net/route	/proc/net/route	bfbd01c4cf59a84d9ba40a02b9aa27f6.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact