5717646f045971b2e06fca6859d0d2ef618d2c670a60ca6dcec3cab81707c0b4

Analysis

max time kernel
12384s
max time network
146s
platform
debian-9_mips
resource
debian9-mipsbe-20221111-en
resource tags

arch:mipsimage:debian9-mipsbe-20221111-enkernel:4.9.0-13-4kc-maltalocale:en-usos:debian-9-mipssystem
submitted
04-04-2023 01:54

Target

8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf
Size

111KB
MD5

b3fefe0638fe6ec9379250b7828c13c6
SHA1

8acdd6917b5f3d742de9e30f083a585bfcb92450
SHA256

8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc
SHA512

c9af95d68bb33909424c7ca8d2b0fd0d5c5dc1fa36cbc794bd27a913855fb22195ec0c5a3889d2dd56c6a1ed16ce0f33cb7320fdc564fc104a226dcba5e818ad
SSDEEP

3072:7ExVvKY9cxN5hZXynGuExmkizF9GhsRiAe:o7SRN5hZXySxmkizF9GhsRiAe

Score

7^/10

Reads system routing table 1 TTPs 1 IoCs
Gets active network interfaces from /proc virtual filesystem.

System Network Configuration Discovery
T1016

Processes:

8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf

description ioc process

/proc/net/route /proc/net/route 8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf
Reads system network configuration 1 TTPs 1 IoCs
Uses contents of /proc filesystem to enumerate network settings.

System Network Configuration Discovery
T1016

Processes:

8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf

description ioc process

/proc/net/route /proc/net/route 8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf

description	ioc	process
/proc/net/route	/proc/net/route	8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf

description	ioc	process
/proc/net/route	/proc/net/route	8437eb713086dda49d5e636f97bb100ca9c35d7a6f6b00d335f060bc2e9155bc.elf

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact